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FLASHLINE TASTE-TESTS JAVA AND EJB 



BY REBECCA ROHAN 

I s the development community 
ready to move from incremen- 
tal compilation to incremental 
testing? 

Flashline.com Inc. 's Quality 
Assurance Lab, a testing out- 
source service for Java code, 
JavaBean components and En- 
terpriseJavaBeans (EJB), is up 
and running with the idea that 
developers and IT managers 
can submit code for testing 
throughout the development 
cycle— allowing them to identi- 
fy and correct problems before 
they become costly. 

"We have expertise you won't 
see in-house," said Charles 
Stack, F lashline's president and 
CEO (www.flashline.com). "You 
send us your code, we analyze it, 
and it comes back with recom- 
mendations." Both subscription 
and piecemeal pricing are avail- 



able. Piecemeal prices will be as 
low as $50 per test and may run 
up to $2,500. Flashline will ne- 
gotiate subscription prices on an 
individual basis. 

The move to testing broad- 
ens F lashline's menu of mostly 
Java services, which includes a 
component marketplace that 
brings together buyers and sell- 
ers for online purchase of pre- 
developed software, a place for 
developers to advertise their 
services, and a venue for buyers 
to post requests for bids ("Com- 
ponents by Design"— formerly 
"Beans by Design"). Develop- 
ers bid, buyers chat, and F lash- 
line takes care of the advertis- 
ing and online transactions 
while counting a few beans into 
its own jar. 

The new Quality Assurance 
Lab supports F lashline's buy- 

► continued on page 13 



card company and a 
service. 



Microsoft to Developers: 'You Are 
Indispensable to Programmable Web' 

OUTLINES PLANS FOR OVERHAUL OF VISUAL BASIC, VISUAL STUDIO 

by edward j. correia card company and a parcel 

In his first major announce- 
ment since taking the helm of 
Microsoft Corp., CEO Steve 
Ballmer told of plans to revamp 
its flagship development tool, 
Visual Basic and the broader 
suite, Visual Studio, to make 
the tools more Web savvy. 

By enhancing existing prod- 
ucts with Web capabilities, 
Ballmer said, developers will be 
able to use their existing knowl- 
edge and skills to build the next 
generation of Web applications. 

I n explaining M icrosoft's vi- 
sion of the future in a speech 
delivered to more than 2,000 
developers at the Visual Basic 
Insiders Technical Summit 
(VBITS) last month, Ballmer 
outlined a list of ca- 
pabilities centered 
around Visual Basic. 

The new features 
will permit compa- 
nies "to access ser- 
vices exposed by 
other businesses, en- 
abling several com- 
panies to work to- 
gether to support a 
common customer," 

he said, referring to Steve Ballmer promised 
an example involving Web-centric updates to 
a retailer, a credit- Microsoft's Visual Studio, 




NEW WEB SERVICES 

Making this possible will be 
Web Services. Analogous to the 
Windows services that VB 
developers are accustomed to 
using, Web Services will make 
standard Web protocols like 
HTTP and XML directly avail- 
able to Visual Basic, eliminat- 
ing the need to write code for 
these capabilities from scratch 
or import them from Visual 
C++, according to the com- 
pany. 

Microsoft will further en- 
hance its veteran development 
tool with ASP+ Web Forms, a 
drag-and-drop variant of the 
Rapid Application 
Development (RAD) 
model, which will be 
based on XM L and 
Microsoft's COM + 
component object 
model. ASP+ will 
work with any Visual 
Studio language 
such as Visual Basic, 
Visual C++ or Visual 
J++, the company 
said. Web Forms 
will permit develop- 

► continued on page 30 



IBM OFFERS NEW PORTING TOOLS FOR AS/400 

Big Blue also lines up new ASPs for its midrange platform 



BY ALAN ZEICHICK 

Call it the Rodney Dangerfield 
of enterprise platforms. While 
it's not quite fair to say that the 
AS/400 gets no respect, IBM 
Corp.'s midrange platform is 
often overlooked, as analysts, 
journalists and Internet start- 
ups focus on the three-way 
battle among Unix, Windows 
and Linux. 

That doesn't mean that the 
AS/400 platform is standing 
still— and it's not, thanks to a 
new environment that allows a 
subset of AIX applications to 
run under OS/400, the AS/400's 
operating system. 



According to I BM , this new 
capability, called AS/400 
Portable Application Solutions 
Environment (AS/400 PASE), 
is primarily designed to allow 
the integration of packaged ap- 
plication suites, such as enter- 
prise resource planning, e-com- 
merce, business intelligence, 
supply chain and customer rela- 
tionship management applica- 
tions onto the AS/400. 

Technical documentation 
released about AS/400 PASE, 
which is included with OS/400 
version 4 release 4, explains 
that it's a modular component 
of OS/400 that provides a sub- 
set of AIX run-time functionali- 
ty, by using the AS/400's Power- 
PC processor's ability to switch 
between AS/400's native run- 
time and AIX run-time modes. 

Applications deployed us- 
ing AS/400 PASE can access 
its file systems, security and 
D B2 databases on the AS/400. 



IT'S SO SLIC 

Architecturally, the introduc- 
tion of PASE leverages the 
A S/400's modular kernel design 
and exploits the PowerPC 
processor's ability to execute 
both the AS/400's native 64-bit 
CISC instruction set and the 
32-bit RISC instruction set re- 



quired by AIX, IBM's version 
of Unix. Previously, OS/400 it- 
self included a small kernel, 
SLIC (System Licensed Inter- 
nal Code), which managed the 
hardware and memory address 
space. 

Above SL I C sits a hardware 
adaptation layer, which IBM 
calls the Technology I nd- 
ependent Machine Interface, 
or TIM I. Above TIM I live 

► continued on page 30 



AS/400'S PASE ADDS AIX CODE LAYER 
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Chris Dressier, Senior Program Manager, NORDSTROMshoes.com 

"So the challenge here was knowing 
the speed of how quickly we had to bring 
shoe vendors online." 




"We went from 6 to 10 to 
20 vendors and we're 
continuing down that road." 



'So how do we rapidly do 

the development to 
make all this happen?" 
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"Tools like Microsoft Visual InterDev and 
Visual Basic, laid on top of Windows DNA, allowed 
us to bring this site to market quickly." 
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Maybe you don't have the huge budget to integrate all your e-commerce applications 
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Metacode Components Improve Web Searches 

Claims COM objects provide 70% search success rate 

The COM object has both Java functionality," said John Hell- 



BY DAVID RUBINSTEIN 

Sshhhhhhhh! That's the sound 
of library science colliding 
head-on with the world of high 
technology. 

M etacode Technologies I nc, 
a San Francisco start-up rough- 
ly 14 months old, is applying old 
information-science techniques 
to new technology with two new 
products— Metafind and M eta- 
tagger— that they claim will 
help organize information in a 
database or catalog to improve 
the success rate of searches for 
that information. 

"[Librarians] have a lot of ex- 
pertise in the area of delivering 
information," said Paul O'Leary, 
senior information scientist at 
M etacode. "We're bringing that 
expertise and experience in a 
useful way to get information." 

Based on in-house testing, 
Metacode claims only 20 per- 
cent of end users searching for 
a product or information on a 
Web site or in a database find 
exactly what they're looking for. 
With its new system of tagging 
and searching, Metacode be- 
lieves it can increase that num- 
ber to a 70 percent success rate. 

M etafind and M etatagger are 
COM objects customized to 
work in conjunction with existing 
applications. Metafind allows 
database operators or Web site 
visitors to quickly find what they 
want, even if they don't know 
how to ask for it, by accommo- 
dating variations in terminology 
and the wide range of errors 
users make when entering 
queries for a product or content. 



and Visual Basic APIs, making it 
"flexible in terms of what you can 
hook it into," said Roger Avedon, 
director of development. The 
initial release of Metafind sup- 
ports Solaris and Windows NT. 
M etacode is considering a Linux 
release. 

M etatagger allows content 
originators, publishers and dis- 
tributors to automate the 
process of categorizing and la- 
beling text content while lower- 
ing the cost of editing and index- 
ing. "We're moving toward a 
thin-client implementation, 
which would increase portabili- 
ty," Avedon said. The M etatag- 
ger client application currently 
runs on Windows NT. 

The products can be used 
independently or in concert 
with each other. Metafind has 
just been released, and 
M etatagger is expected to be 
available by mid-March. 

"Some software vendors in- 
clude a small amount of this 



wig, CEO of Metacode 
(www.metacode.com). "We can 
do much better than any out-of- 
the-box solutions." 

M etacode is moving into ver- 
tical domains that have special- 
ized vocabularies, such as phar- 
maceuticals, health care chemi- 
cals, business and finance, 
publishing and home improve- 
ment— "anything where you 
have to query against a set of 
terms," said Dan Ortega, mar- 
keting director. 

"Say someone is diagnosed 
with Lou Gehrig's disease," 
O'Leary explained. "Amy- 
otrophic lateral sclerosis [the 
medical name for the disease] is 
hard to remember and hard to 
spell. We bring in vocabularies 
that identify other names and 
add algorithmic approaches for 
matching," so that even if the 
words are misspelled, or placed 
in the wrong sequence, the soft- 
ware still will be able to locate 
the information. I 




Metacode's Metatagger, Metafind automate and improve Web searches. 



Compuware Updates DevPartner, DriverStudio 



Compuware Corp. has upgrad- 
ed two products in its N uM ega 
product line to improve their 
support for Windows 2000. 

The first, N uM ega D evPart- 
ner Studio 6.5, broadens its 
core support for Visual C++, 
Visual Basic and Java by adding 
new support for W indows D N A 
2000 and Web technologies. 

According to Compuware 
(www.compuware.com), Dev- 
Partner Studio 6.5 introduces 
the first distributed profiling 
and coverage tools with multi- 
language, multitier support. By 
automatically finding software 
errors, performance bottle- 
necks and untested code, Dev- 
Partner Studio 6.5 is claimed to 
accelerate software develop- 



ment and improve application 
performance and reliability. 

DevPartner Studio 6.5, ex- 
pected to be available in April, 
includes developer productivity 
tools for source code analysis, 
run-time error detection, perfor- 
mance profiling, memory pro- 
filing and code coverage analysis. 

According to the company, 
these tools have been enhanced 
to support Microsoft Windows 
DNA 2000 products and tech- 
nologies including Visual Studio, 
COM+, Microsoft Transaction 
Server, Microsoft Message 
Queue, Internet Information 
Services, Visual Basic WebC lass- 
es, Active Server Pages and 
ActiveX Data Objects. 

The second update, Driver- 



Studio 1.5, is designed to accel - 
erate the development of device 
drivers for Windows platforms, 
including Windows 2000, with 
enhanced debugging and test- 
ing capabilities. 

One of the new features in 
1.5 is code coverage analysis for 
kernel mode drivers. The Nu- 
M ega TrueC overage D river 
Edition is said to improve the 
testing process by providing a 
visual display of code coverage 
information that enables a 
developer to precisely deter- 
mine how thoroughly a driver 
has been tested. As a result, 
developers could deliver more 
reliable device driver software. 

D riverStudio 1.5 is available 
now; its list price is $2,499. 1 




ws Brief 

COMPANIES 




SaiesLogix Corp. and Macoia inc. have signed an OEM agree- 
ment under which the companies will collaborate on linking 
their respective technologies. . . Red Hat inc. has expanded its 
kernel development group. The work done by the Red Hat ker- 
nel development group, as with all organizations working on the 
Linux kernel, is submitted to LinusTorvaldsfor approval before 
being incorporated into an official Linux update . . . 
Alpha Processor inc. has introduced its Linux Developer's Pro- 
gram, offering developers an opportunity to purchase discount- 
ed UP1000 Alpha-based development workstations. . . m&a 
West inc. launched its Linux portal site, www.links2linux.com, 
intended to be a clearinghouse for Linux developers, investors 
and end users . . . Cisco Systems inc. is now among the most 
admired companies in America, according to Fortune Maga- 
zine's annual survey of the country's leading business men and 
women. General Electric Co. again was named the most admired 
company, while Cisco ranked fourth. Other technology compa- 
nies in the top 10 include Microsoft Corp. (2), Dell Computer 
Corp. (3) and Intel Corp. (8) . . . This month, Saion.com is ex- 
pected to launch a Web site dedicated to the open-source 
movement. The new destination will serve as an informational 
and reference resource on the open-source phenomenon that 
will draw largely on the reporting and commentary of Andrew 
L eonard, senior technology writer for the Salon Technology site 
. . . EarthWeb inc's dice.com, a nationwide job site for IT pro- 
fessionals, has completed exclusive agreements with 32B its- 
Online and PenguinApps to provide dice.com's job listings on 
those sites . . . ibm Corp. will offer development software and 
technical support at no charge to business partners that are 
building Windows 2000 applications for connected enterprises. 
The offering of software and support is designed to ease Win- 
dows 2000 integration with other critical business systems in- 
side an enterprise or supply chain. The software is from IBM 's 
PartnerWorld for Developers Web site, www.developer 
.ibm.com, beginning March 31. A version of WebSphere with 
Windows 2000 support will be available for download in April. 



PRODUCTS 



Open Cascade, a set of C++- based CAD/CAM/CAE modeling 
components from M atra Datavision, is now available for Win- 
dows NT, Solaris and Linux. New to Open Cascade is a rapid 
development environment for graphics applications. Down- 
load source code and binaries from www.opencascade.org . . . 
Advanced Software Technologies I nc. has released GDPro 4.0, 
aUML tool kit for Java and C++ developers using CORBA. 
New features include a system hierarchy window for "drag and 
drop" capability, and sequence diagrams that include "cars" 
and "spreaders" for easier diagram construction. GDPro 4.0 
supports Windows 9x/NT and Solaris. Pricing begins at $2,495 
for Windows and $3,995 for Solaris. . . InstallShield Software 
Corp. has announced the availability of InstallShield Professional 
2000 second Edition, with expanded features that include an 
object development kit (ODK). The company also released an 
update to its Web-based installer, instaiiFromTneWeb 3.1 .. . Vitrix 

Inc. has released an SDK for its Hour-Track 2000 Workforce 

Management Suite of labor management solutions. HourTrack 
2000 identifies employee-related time expenses, minimizes un- 
necessary payroll losses and improves planning for budgets, 
schedules and workday deployment. . . Informix Corp. has re- 
leased Foundation.2000 and cioudscape 3.0 on Linux. I nformix 
is also announcing special price promotions for Founda- 
tion.2000 for its I ntel-based Linux software. The promotion is 
to run through Oct. 10. .. Persistence Software Inc. is porting 
PowerTier for Enterprise JavaBeans (EJB) to Linux. PowerTier 
for EJB provides statefu I fail-over, partitioning and workload 
balancing through PowerTier's ability to synchronize multiple 
object caches distributed across multiple servers. PowerTier 
for L inux is expected to be available ► continued on page 30 
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source, document, and Web content. 
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o It works equally well over the 
I nternet, the office LAN and the 
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WaSP Puts Good Buzz on XHTML 1.0 Standard 

But keeps pressure on browser vendors to implement earlier standards 



BY REBECCA ROHAN 

Earlier this year, the World 
Wide Web Consortium put its 
official "Recommendation" 
stamp on XHTM L 1.0, and the 
nonprofit Web Standards Pro- 
ject (WaSP) made a beeline to 
the applause machine to pro- 
claim its support for the W3C's 
move. It since has buzzed 
around browser makers' bon- 
nets in a continued campaign 
for supporting existing stan- 
dards such asXM L,CSS, DOM 
andHTML. 

XHTML 1.0 is the link be- 
tween the old and new ways of 
evolving Web capabilities. With 
the old way-HTML-the 
W3C created new generations 
of specific tags to do specific 
tasks with each new HTML ver- 
sion. With the new way- 
XML— individual Web authors 
can create tags to do anything 
they please on demand, because 
XM L isn't a new set of tags— it's 
a uniform way for people to cre- 
ate their own. It's the difference 
between a written language 
based on symbols that depict 
specific words such as "dog" or 
"man," and language based on 
an alphabet. Twenty-six charac- 
ters in the word-symbol lan- 
guage convey 26 objects or con- 
cepts. Twenty-six characters in 
the alphabet convey whatever 
you want to say. 

To bridge the gap between 
the Hypertext Markup Lan- 
guage (HTM L), which was rel- 
atively simple to learn and cre- 
ate, and the more rigorous, 
though not entirely different 
Extensible Markup Language 
(XML), the W3C basically 
shaped HTML 4 into an XML 
1.0 application that remains 
compatible with existing 
browsers as long as authors ad- 
here to a small set of guidelines, 
and called it XHTML. 

XHTM L is no less a step to 
standardization and its benefits 
than convertible currency, 
touch-tone phones, Arabic 
numerals and English. And 
that'swind beneath the wings of 
WaSP (www.webstandards.org), 
a large body headed by a small 
but high-powered steering 
committee seeking commit- 
ment to standards from not 
only the W3C, but from devel- 
opers and browser makers. 

"Some of the members of the 
steering committee are 'invited 
experts' to the W 3C ," said J eff rey 
Zeldman, group leader of WaSP. 




Browser makers 
should compete 
on user interface 
features, not on 
variance from 
standards, said 
Jeffrey Zeldman. 



"An invited expert is someone 
who is not necessarily a dues- 
paying member of the W3C, but 
who is so totally knowledgeable 
in some area that they can help 
with that area of the standards." 
WaSP member Tim Bray 
functions in 
that capacity 
for XML, and 
Todd Fahr- 
ner for Style 
Sheets. WaSP 
collected Bray 
and Fahrner 
after they al- 
ready held 
their positions 
as invited ex- 
perts in W3C. 
"Standards 
can't come 
from Net- 
scape; they can't come from 
Microsoft; they can't come 
from Opera," Zeldman said. 
"They have to come from an 
impartial, noncommercial third 
party in which all the browser 
makers participate." 

THE BIRTH OF WASP 

WaSP began in 1998 when 
Glenn Davis, co-founder of 
Project Cool Inc., and George 
Olsen of How2HQ.com spoke 
via list-serve about hours wast- 
ed debugging. "The reason I 
got involved," said Zeldman, 
"was that I spent most of 1997 
figuring out why things I was 
doing weren't working. I n 1996 
the Style Sheets Recommenda- 
tion came out, and in 1997 In- 
ternet Explorer 3 began to sup- 
port it; but when I tried it, it 
wasn't working. I was frustrated 
and a lot of people were frus- 
trated, and just felt like, 'Well, 
thisisthe way it is.'Then Glenn 
Davis and George Olsen said, 
let's do something about it.'" 

The group quickly grew to 
thousands of members, with a 
steering committee of roughly a 
dozen. Anyone can join the 
group by signing on at the Web 
site (www.webstandards.org). 
"The membership is a way of 
saying to Microsoft or Net- 
scape, look at these people— 
10,000 of your customers aren't 
happy,'" Zeldman said. 

"Two years ago I wrote to 
many of these companies, and 
that mail went into a vacuum," 
recalled Zeldman. "They were 
getting tons of mail." N ow vari- 
ous members of the group help 
companies with their betas. 



"We work with browser makers 
as they're developing their 
products— when asked— to 
help them implement the stan- 
dards in a way that makes sense 
for people who use the Web, 
because this is not an abstract, 
academic exercise. We're doing 
this so the Web will work for 
people." D evelopers have infor- 
mally told Zeldman they waste 
25 percent of their time with 
problems caused by non-stan- 
dards-compliance in browsers. 
"Opera has always been 
about standards," Zeldman 
said, adding that Microsoft 
Corp. and Netscape Communi- 
cations Corp. are headed to- 
ward 100 percent compliance 
in coming releases. Zeldman 
said it's important to convince 
browser makers to compete on 
user interface features and not 
on variance from standards. 
"Both Microsoft and Netscape 



have claimed the Web Stan- 
dards Project as an ally," said 
Zeldman. While the WaSP says 
"well done" to the people who 
created XML, it wants to re- 
mind everyone that "XHTML 
won't be able to do its job if the 
[standards that constitute it] 
aren't fully supported." 

Invited XML expert and 
WaSP steering committee 
member B ray is one of the peo- 
ple who wrote the XM L specifi- 
cation. "I think what the WaSP 
is saying is that XHTM L is a 
good idea, but it's not going to 
really help people until the 
browser vendors finish up the 
implementation of some of the 
earlier standards that we've 
been bugging them about for 
the last couple of years," he said. 
"The crucial things we think 
they haven't finished are XM L, 
CSS [Cascading Style Sheets] 
and the Document Objects 
Model." CSS and the DOM 
play a large part in XHTM L. 

"The N etscape people claim 
5.0 is going to follow the rules 



100 percent," said B ray. "I t's not 
a shipping product yet. M icro- 
soft is being relatively quiet in 
terms of saying what they will 
and won't support, so we'll just 
have to see what they do." 

Zeldman wants to catch the 
browser makers with honey, 
but Bray said, "The real call to 
action is to browbeat the 
browser vendors to build in the 
missing pieces so we can start 
doing this stuff. M ost IT man- 
agers get regular visits from 
their Microsoft evangelist. 
They should say, 'Damn the 
new features— take the existing 
features and make it follow the 
rules.' They should say that the 
most important thing that M i- 
crosoft and Netscape can do is 
to build in support for the miss- 
ing features." 

"Standards are pro-user," 
said Bray. "They make users' 
lives better and level the play- 
ing field, so that means vendors 
aren't going to support the stan- 
dards properly unless their cus- 
tomers demand it." I 



WRQ Updates Reflection Suite 

Targets developers with host-to-Web emulation APIs, VBA support 



BY ALAN ZEICHICK 

nee strictly the provi nee of net- 
work administrators, host-con- 
nectivity suites— despite their 
being labeled with the less-than- 
cutting-edge phrase "terminal 
emulation"— are increasingly of 
interest to enterprise applica- 
tions. At least, that's the line tak- 
en by W RQ I nc, as it updates its 
Reflection host-to-LAN and 
host-to-Web emulation suites. 

WRQ's flagship host-to- 
LAN terminal emulation server, 
Reflection version 8, now inte- 
grates M icrosoft Corp.'s Visual 
Basic for Applications version 
6. It has also passed M icrosoft's 
Windows 2000 interoperability 
suite, and includes direct sup- 
port for W indows 2000's Active 
Directory features. 

Visual Basic for Application 
(VBA) support isn't completely 
new to Reflection 8. "The first 
version which had VBA support 
was Reflection 7," said Sue Lind- 
sey, product manager for WRQ's 
Reflection product suite. "With 
Reflection 8, we went from VBA 
5 to VBA 6, which is important to 
work seamlessly with [M i- 
crosoft's] Visual Studio 6." 

"We've added the VBA; 
we've added event schedules. 

1 t's all about helping developers 
take information off the host 
and bring it into a Windows ap- 
plication," Lindsey said. VBA is 



such a key part of the product, 
she added, "because VBA is an 
environment that's in [Micro- 
soft's] Excel and Word and 
Access. It's very easy for those 
applications and Reflection to 
talk to each other. We can pass 
data automatically between the 
host and the applications." 

What about non-VBA con- 
nectivity? "The APIs in Reflec- 
tion are very well documented," 
said Lindsey. "It's open to any 
language developers want to use. 
But VBA is something that dif- 
ferentiates us, and that's the tool 
we provide. Most of our com- 
petitors have proprietary script- 
ing languages, and they call them 
'Visual Basic-like languages.' 
They're not actually OEMing 
Visual Basic from Microsoft, 
which is what we're doing." 

Versions of Reflection 8 are 
available to connect with IBM 's 
S/390 mainframes, AS/400 
mid range systems, H P e3000 
midrange systems, X Windows 
and OpenVM S systems; Reflec- 
tion 8 itself runs on Windows 
NT/2000 Server. 

WRQ (www.wrq.com) also 
updated and renamed its newer 
host-to-Web product suite. 
Formerly known as Reflection 
EnterView, the Java-based ter- 
minal emulator is now called 
Reflection for the Web. U pdat- 
ed to version 3, Reflection for 



the Web has enhanced security 
for over-the-lnternet applica- 
tion, offering 168-bit Triple 
DES encryption and HTTP 
secure tunneling. 

When a user logs on to 
Reflection for the Web, a Java- 
based applet downloads from 
the product's server to the client 
browser and executes locally. 
That applet is designed with 
Java-based API hooks for corpo- 
rate developers. According to 
WRQ, those APIs allow devel- 
opers to use Java, JavaScript, 
VBScript or HTM L to automate 
logon script, access dialog boxes 
or build Web-based frameworks 
around legacy applications. 

"[Those APIs] can buy de- 
velopers time," said Kristen 
Connor, marketing manager of 
WRQ's Reflection for the Web 
software. "If developers get the 
ultimatum 'Get these applica- 
tions to the Web,' with Reflec- 
tion to the Web, without a 
whole lot of development 
effort, they can make the appli- 
cations available to the browser. 
Then, they can take a more 
focused approach on going ap- 
plication by application, in 
terms of rewriting the business 
logic" into new software. 

"We have exposed APIs in 
Reflection for the Web," Con- 
nor continued, "so [developers] 

► continued on page 8 



8 



NEWS 



Software Development Times . March 15, 2000 , 



www.sdtimes.com 



Defect Tracker Takes Control of Projects 

Subscription service uses Web to centralize developer bug databases 



BY EDWARD J. CORREIA 

Tracking software through de- 
velopment can be a thorny task. 
As lists of bugs and program 
defects pile up, projects can 
seem out of control, making 
prioritization impossible. A 
new product from Pragmatic 
Software Company Inc. may 
hold the solution. 

Defect Tracker version 2.0 is 
a Web-based system for storing, 
viewing and maintaining activi- 
ties surrounding development 
projects. But unlike competing 
products licensed by the user, 
Defect Tracker is a subscription 
service. For $199 per month, 
developers and managers re- 
ceive unlimited access to the 
system with no limits on the 
number of users or projects. 

The Web-based system re- 
quires no client software instal- 
lation, is platform independent 
and can be activated and main- 
tained online by the subscriber. 
A demo version can be viewed 



atwww.defecttracker.com. 

Targeted at quality-assurance 
professionals, Defect Tracker is 
suited for both ISVs and for 
companies developing solutions 
in-house, according to Steve 
Miller, president and CEO of 
the 8- year-old company. 

"What I really like is that it's 
configurable all the way 
through. For example, status 
labels can be customized to 
read any way the developer 
wishes," Miller said, referring 
to the labels assigned to soft- 
ware development tasks as 
they move through the 
process. "Anywhere there's a 
drop-down menu, it can be 
customized," he said. 

Defect Tracker provides a 
series of templates designed to 
assist in the development 
process from concept to com- 
pletion, said Miller. "Tem- 
plates cover three major areas: 
functional specifications, test 
cases and defect tracking," he 



said, and defined what the 
product provides developers 
from each area. Functional 
specifications is a space for de- 
velopers to detail what the fi- 
nal program is supposed to do 
for users. This space also may 
be used for a list of contract 
deliverables. 

I n test cases, D efect Track- 
er provides a way to describe 
methodologies for testing the 
application as it develops and 
describes the expected results. 
Finally, the defect tracker it- 
self stores all remaining bugs, 
defects and other tasks, along 
with who discovered them and 
when, whom it is currently 
assigned to, and customizable 
status label. The product also 
features a customizable re- 
porting system with charting 
capabilities. 

System security is handled 
by a three-tiered security im- 
personation approach that 
avoids ODBC access. Anony- 



mous Web users log on to a 
machine that then attaches to 
a second machine using an in- 
ternal logon name and pass- 
word. 

WORKING IN ISOLATION 

Users never have direct access 
to the file system. "We feel 
that our system is very secure, 
and nobody gets rights to di- 
rectory structure. Anonymous 
users only, each with locked- 
down roles," said M iller. Data 
is further separated by depart- 
ment, which enables subscrib- 
ing companies to create inter- 
nal security levels. Individual 
developers can be set up to see 
only tasks that are assigned to 
them, he added. 

Himself a programmer and 
project manager, Miller spent 
15 years developing his ideas 
about what a project-tracking 
product should be. In 1992, he 
founded Pragmatic Software 
(www.pragmaticsw.com), a con- 



sulting firm providing profes- 
sional software and Internet 
solutions. Originally developed 
as an in-house tracking aid, 
Defect Tracker version 1 was 
released to the public in 1998. 
New to version 2 are subscrip- 
tion pricing and the Web-based 
capabilities. 

M iller's first programming 
job was with Texas-based con- 
sulting giant Electronic Data 
Systems Corp., followed by a job 
with Perot Systems Corp., and 
on to M icrosoft Corp., where he 
led a software testing team. The 
developers at M icrosoft used a 
home-grown tracking solution 
called RAI D , which they appar- 
ently loved to hate. 

"E verybody complained 
about [RAID], because it just 
wasn't very robust," but the 
Microsoft program furnished 
M iller with ideas. When M iller 
began consulting independent- 
ly, M icrosoft was his first client. 
"One of the reasons I devel- 
oped [Defect Tracker] was 
because every place I went they 
had a need for a defect-tracking 
system and to be able to com- 
municate," he said. I 



On-the-Fly-ing Trapeze With iA's Online Docs 



BY REBECCA ROHAN 

Information Architects Corp. 
announced the release of 
Metaphoria, an Extensible 
Markup Language (XML)- 
based "dynamic aggregation 
and syndication" software that 
exchanges both structured and 
unstructured data bidirection- 
ally among HTML, XHTML, 
XML, RDF, ICE, WORD and 
PDF on the fly. 

Using templates and output 
settings, M etaphoria Converter 
can carry out instructions for 
using specific fonts, style sheets 
or declarative font tags. Infor- 
mation Architects claims the 
Converter provides backward 
compatibility to earlier file for- 
mat versions and is faithful to 
originating documents. "We 
were going to use some of the 
existing filters out there, and 
they were so bad we decided to 
build our own," said Bob G rud- 
er, CEO of the company 
(www.ia.com). "It grabs a file, 
converts on the fly and repur- 
poses to the look, touch and 
feel you want— XM L to brand." 

Metaphoria Watcher is an 
option that detects changes in 
source documents and auto- 
matically updates XML or 
HTML files based on the 



source, but you can suppress 
updates on documents you 
want to preserve, G ruder said, 
adding that Watcher consumes 
"negligible" resources. 

"You don't need call centers 
anymore, because all the data is 
available," said G ruder. "You 
don't need to have a policy and 
procedure document. You can 
get that 10,000-page document 
on the Web and see the changes 
when they happen." 

Syndicator integrates data 
with different templates, style 
sheets or other formatting de- 
vices to output documents to 
any Web site or device connect- 
ed to the Net, G ruder said. The 
Metaphoria framework uses 
metadata and takes information 
directly from the source docu- 
ment and outputs it to the de- 
sired format when called for, 
then relies on Watcher and 
Converter to update the syndi- 
cated material. 

Syndicator can allow multi- 
ple providers to share digital as- 
sets while projecting a custom 
look for their own Web pages. 
Affiliates sharing assets can also 
specify how end-user requests 
will be handled (for example, 
HTTP_REFERER or AOL's 
USER AGENT header). 



Aggregator takes informa- 
tion and even functionality, 
such as shopping carts, from 
different sources and dynami- 
cally produces it at a seamless 
single point on the Web. "Say 
you want to launch a Word 
DOC, PDF file, Oracle data 
and something out of ERP. You 
get a seamless, clear look at all 
four on one page without 



frames," said G ruder. "Wireless 
doesn't support frames. We're 
the glue— you could transfer 
[the result] to a wireless PDA." 
"It's a way you can conduct 
business," said G ruder. "If you 
want to create a business-to- 
business hub, have all the sup- 
pliers syndicate information 
into that hub, and you can see 
the costs and whether the parts 
are available for distribution. 
You could interface with ERP, 
first aggregate to get a view, 



then syndicate that information 
back to ERP. You have a fric- 
tionless transaction. ..blending 
the live data together." 

Aggregator is available on 
Linux, Solaris and Windows NT, 
and uses the Java servlet API to 
communicate with Web servers. 

Aggregator costs $35,000 for 
two C PU s and $5,000 each there- 
after. Syndicator costs $25,000. 
Converter costs $10,000 for 
each file type you wish to con- 
vert. Watcher is $5,000. 1 



WRQ UPDATES 

< continued from page 7 

can change the look of the ap- 
plication. There is also a tool in 
the Professional edition which 
allows developers to change the 
look of the mainframe or 
AS/400 application. It's a client- 
side tool that looks at the 3270 
or 5250 data stream and, based 
on rules, rewrites the look so 
that function keys become but- 
tons, numbered lists become 
drop-down lists and so on." 

Historically, WRQ wooed IT 
and network managers with its 
Reflection products, but now 
the company will be talking 
more to application develop- 
ment managers— the decision- 
makers charged with bringing 
legacy applications to the Web. 



"We've always focused on the 
IT managers because they've 
tended to control the network," 
said Lindsey. "But we know how 
to do terminal emulation so well 
that we can add these program- 
inability features and talk to the 
applications managers." 

For example, said Lindsey, 
now that Reflection 8 includes 
VBA support, "we'll be going to 
the VBA shows and the Win- 
dows shows." 

"You're going to see a new 
WRQ this year," said Connor. 
"We're investing aggressively." 

WRQ ACQUIRES SUPER- 
NOVA'S EAI TECHNOLOGY 

WRQ recently announced it has 
acquired the technology and op- 
erations of enterprise applica- 
tion integration vendor Super- 



Nova Enterprises B.V., enabling 
its customers to move quickly to 
e-business operations. With 
SuperNova, WRQ said it can 
now offer a comprehensive set 
of solutions for integrating both 
legacy host applications and en- 
terprise applications into the 
overall e-business infrastructure. 

According to the announce- 
ment, SuperN ova's products 
combine the interoperability 
of integration platforms and 
adapters with the strength of 
application development tools. 
While these applications com- 
prise almost all back-end appli- 
cations, the company announced, 
SuperNova also provides the 
flexibility to integrate with new 
"off-the-shelf" applications. 

Details of the acquisition 
were not announced. I 
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Hot for answers? 



Head full of burning questions about 
Linux™, Java™, and more? Don't get all hot 
and bothered— HotDispatch them. 
Answers are blazing fast, and 
registration's free. Simply post your 
questions at a price that's right for you. 




Then, watch the answers pour in! Get 
inside the heads of the world's hottest 
Linux and Java developers. Head for 
HotDispatch.com™, where hot Java and 

Linux questions meet their match. 

i 

HotDispcftcn.com 
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Getting Active Directory's Number 

IS THIS FEATURETHE MAIN BENEFIT OF WINDOWS 2000, OR ITS MAIN WEAKNESS? 



BY LISA MORGAN 

Active Directory is going to 
redefine directory services as 
we know them. Or so says 
Microsoft. Is this just more 
hype from Billville that thickly, 
yet masterfully, masks underly- 
ing real-world technical issues? 

M icrosoft says no, it's not 
hype. "Active Directory [is] a 
consolidation point for reduc- 
ing the number of directories 
that companies have," asserted 
Mark H assail, Windows 2000 
product manager at M icrosoft 
Corp. "Benefits include im- 
proved information sharing and 
common management of users, 
computers, applications and 
directory-enabled devices." 

According to Microsoft, 
directories are valuable because 
they simplify the management 
of users and resources in a net- 
work environment. Microsoft 
Windows 2000 is extending the 
role of directories to include 
security services, directory con- 
solidation and networking, 
H assail said. Active Directory 
"raises the bar for what a direc- 
tory service needs to be." 

Novell Inc., makers of the 
Novell Directory Services 
(NDS), says yes, it's hype. 
"We're excited about Active 
Directory for Microsoft Win- 
dows 2000," said Gary Hein, 
corporate strategist at Novell. 
"It represents a great opportu- 
nity for us to improve on it. 
M icrosoft's Active D irectory is 
not quite a directory service." 

Of course, what else would a 
competitor say? M icrosoft has 
positioned Active D irectory as a 
centralized directory under 
which all other network operat- 
ing system and application 
directories can run. 

The big problem with that 
approach, Hein pointed out, is 
the lack of platform support. 
"How can you offer a true 
enterprise solution if all you 
support are Windows 2000 
servers?" he argued. He 
stressed the lack of Linux and 
Solaris support for example, 
adding, "[Microsoft is] not 
really supporting NT either. To 
get the benefits of the new 
Active Directory, you need 
Windows 2000 servers." 

The Windows 2000 server 
includes Active Directory and 
the Active Directory Services 
I nterface (AD SI ), the W indows 
Open Services Architecture 



Messaging API (MAPI) and 
LDAP C API. Hein said, "De- 
velopers are rejecting AD SI in 
favor of LDAP [because it's an 
industry standard]." 

What about NT migration? 
Clearly it's a big issue facing 
developers. 

M icrosoft's H assail said in 
regard to Active Directory, 
there are two ways of migrating 
from Windows NT to Windows 
2000 Server edition: upgrade 
and restructure. U pgrading and 
restructuring are not mutually 
exclusive operations, he point- 
ed out. You can upgrade first 
and then restructure, or 



restructure and then upgrade. 
"Upgrade is the easiest, 
least-risk migration route," he 
said. "You can define domain 
upgrade as the process of up- 
grading the software on the Pri- 
mary Domain Controller 
(PDC) of a domain, and up- 
grading some or all of the Back- 
up Domain Controllers (BDCs) 
from Windows NT 4.0 to Win- 
dows 2000 Server." According 
to H assail, Windows 2000 sup- 
ports Windows 9x, Windows 
NT 4 and Windows 2000 with 
full interoperability among net- 
works. "Not all systems in the 
domain have to be upgraded to 



411 ON ACTIVE DIRECTORY 



Microsoft Corp.'s Windows 
2000, its replacement for Win- 
dows NT 4, shipped to cus- 
tomers on Feb. 17. 

This long-awaited, updated 
operating system contains 
much that's improved over 
Windows NT: a better user in- 
terface, better stability and 
fewer Blue Screens of Death, 
better management tools in the 
server version, better support 
for laptops and U niversal Serial 
Bus in the workstation version, 
now named Windows 2000 
Professional. But many of these 
changes are evolutionary, not 
revolutionary— and quite a few 
of them are mainly cosmetic. 

B ut there's one feature that 
really is new to Microsoft's 
operating system: an internal 
user, applications and network 
resource database called 
Active D irectory, which drasti- 
cally changes the way that 
users and devices find each 
other and work with each 
other. An understanding of 
what Active Directory is, and 
what it can do, is key to under- 
standing Windows 2000 and to 
making a decision about de- 
ploying this operating system. 

Active Directory replaces 
M icrosoft's domain system. In 
Windows NT 3.51 through NT 
4.0, Windows NT servers, 
users, printers and other net- 
work resources were assigned 
to domains, each controlled by 
a server called the domain 
controller. 

IF THE SHOE FITS 

A small company, Shoe Corp., 
might have a single domain, 



SHOECORP. A bigger compa- 
ny might have several domains 
based on physical locations, 
such as NY-OFFICE and LA- 
OFFICE . An even bigger one 
would have multiple domains 
in each location: NY-SALES, 
NY-MFG and NY-ACCT for 
sales, manufacturing and ac- 
counting. A huge company 
might have dozens of domains 
and domain controllers. 

The problem is that do- 
mains don't scale gracefully, 
because each domain main- 
tains a separate database of its 
users and access privileges. 

Therefore, if a user wants 
access to more than one do- 
main's resources, administra- 
tors had to either manually 
create (and maintain!) separate 
accounts in each domain for 
that user, or create so-called 
"trust" relationships between 
domains, which says that any 
user of one domain has full and 
complete access to another 
domain. F or security purposes, 
that's not a particularly attrac- 
tive option. 

Say a user was part of the 
New York software-develop- 
ment department but occa- 
sionally worked out of the Los 
Angeles office. In order to 
have access to local printers, 
servers and other resources on 
the Los Angeles LAN , the site 
administrator would need to 
provide a separate L os Angeles 
computer account and syn- 
chronize it with the user's N ew 
York account. That sounds easy 
for two domains, but think 
about a company with dozens 
or even hundreds of them. 



take advantage of Windows 
2000 features," he asserted. 

H assail went on to say that 
upgrading the PDC should be 
considered only the first up- 
grade step. To get the benefits 
of Windows 2000, BDCsshould 
also be upgraded, and sub- 
sequently Member Servers. 
When all the servers are 
upgraded, then users can get 
complete access to advanced 
Windows tools and features. 

The purpose of domain re- 
structure is to provide cus- 
tomization, so that directories 
can be structured to suit an 
organization's unique needs. 
The result, said H assail, "is usu- 
ally some rationalization of the 
current structure and perhaps a 
move to fewer larger domains." 

H assail said that in the past, 

Furthermore, it is difficult 
to transfer resources from one 
domain to another; because 
all the domains were sepa- 
rate, moving the user and his 
or her data and access privi- 
leges from the NY app-dev 
domain to the LA sales 
domain would be an adminis- 
trative nuisance, and one that's 
easy to get wrong. 

BRING IT TOGETHER 

Enter Active Directory, or 
AD, which is an enterprise- 
wide database of resources. 
It's designed as a hierarchical 
tree, in which everything on 
the network— servers, users, 
printers, tape drives, files, 
you-name-it— has a unique 
name and unique location in 
the Active Directory. A busi- 
ness's AD database builds off 
of a root, usually the compa- 
ny's Internet domain name. 
For our example, that would 
beshoecorp.com. 

Different qualifiers are 
added to the front of the root, 
going into increasing levels of 
detail. Everyone in the sales 
department would belong to 
sales.shoecorp.com. Thus, a 
user's unique ID might be susan. 
smith.appdev.shoecorp.com. 

If Susan needs to use Los 
Angeles printers or servers, all 
the administrator has to do is 
add permissions for those de- 
vices to her existing Active 
Directory listing. There's no 
need to set her up with accounts 
on both networks. 

And if she moves from the 
applications-development to 
the line-of-business depart- 
ment, a network administrator 
sits at a single console and just 
drags and drops her account 



third parties have provided 
directory management tools, 
but that for the first time, Win- 
dows 2000 provides native func- 
tionality that enables domain 
restructuring scenarios. For 
example, security principals can 
be moved from one domain to 
another while maintaining 
access to resources. Further, 
domain controllers can be 
moved from one domain to an- 
other without complete reinstal- 
lation of the operating system. 

Hein countered, saying: 
"M icrosoft's tools are weak. 
Tools are important. You 
should be able to add more ob- 
jects in a tree and merge ob- 
jects together. There's a great 
deal of opportunity for third- 
party developers to develop 

► continued on page 11 

from appdev.shoecorp.com to 
lineofbiz.shoecorp.com, and 
she now has access to the line- 
of-business servers and loses 
access to the source-code 
servers. 

MORE THAN URLS 

Don't let this simple example 
imply that all Active D irectory 
does is rename domains using 
Internet-style URLs. It's po- 
tentially much more than that. 

Remember, it's a single re- 
source database for the entire 
network. All the domain- 
name model knew about its 
users was whether they were 
allowed to log on to a particu- 
lar domain, if they were users 
or administrators, and which 
computers, disk drives and 
printers on that domain you 
could use. 

Other network applications 
that needed to store informa- 
tion about users, such as M icro- 
soft's Exchange e-mail server, 
needed to maintain their own 
databases to, say, match names 
with e-mail addresses. Keeping 
those databases synchronized 
with the domain databases was 
a real nuisance. 

What does this mean for 
developers? Applications can 
store user information right in 
Active Directory, rather than 
maintaining their own direc- 
tories. If necessary, those apps 
can extend the Active Direc- 
tory database schema to in- 
clude data specific to the 
application's needs. The flip 
side is cross-platform portabil- 
ity. If your apps exploit Active 
Directory, they'll be tightly 
coupled into Windows 2000 
or future Windows platforms. 
-Alan Zeichick 
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< continued from page 10 

value added tools." 

As you'd expect, M icrosoft 
disagrees, saying that Active 
Directory allows developers to 
build powerful directory- 
enabled applications that deliv- 
er greater functionality and 
enable lower total cost of own- 
ership (TCO). According to 
Microsoft's H assail, there are 
six major features of Active 
Directory of interest to devel- 
opers, including group-policy 
integration, service publication, 
directory-object extension, the 
AD SI extension model and 
Active D irectory class store. 

SETTING THE POLICY 

Active D irectory's G roup Policy 
enables network administrators 
to match users with network 
resources. Policies define appli- 
cations and configurations 
based on an employee's role in 
the company, as well as assign 
users to domains and security 
groups. This provides for easy 
deployment of new resources to 
subsets of network uses. 

M icrosoft's H assail said flex- 
ibility is key. "When a user is 
moved into an organization or 
added to a Windows security 



group, his or her applications 
can be installed and configured 
automatically, helping to lower 
installation and configuration 
costs dramatically." 

Novell's Hein argued that 
there are problems associated 
with groups. "There are some 
fundamental flaws in Active 
Directory, particularly with the 
replication of group objects, 
security policies and group poli- 
cies," he said. "If two people 
modify the same object [prior 
to Windows 2000 updating 
those changes], the changes are 
often lost." 

Service publication is also a 
feature of Active D irectory 2000, 
as is direct-object extension. Ser- 
vice publication enables appli- 
cations to publish the names 
and locations of services they 
provide so that clients can 
locate them dynamically. D irect- 
object extension allows applica- 
tions to add new types of objects 
and to extend existing ones. 

With the AD SI extension 
model, application developers 
can associate Common Object 
Model (COM)-based business 
rules with objects stored in 
Active Directory, according to 
Microsoft's H assail. "This pro- 



vides a consistent and simple 
way for developers and adminis- 
trators to interact with an appli- 
cation and its objects. The Ex- 
tension M odel also makes it easy 
to invoke methods across groups 
of objects, such as 'all users in 
the Accounting department' to 
simplify administration." 

Active Directory stores the 
names and locations of COM 
objects installed on the network 
in a section of the directory tree 
called Class Store. H assail said 
COM uses the Class Store to 
locate and install the COM 
objects that users are allowed to 
use on their machines automat- 
ically. "This can lower the TCO 
of COM -based applications by 
simplifying client configuration 
and administration," he said. 

BIG PROBLEMS, 
ACCORDING TO NOVELL 

The biggest problem Novell's 
H ein attributes to Active D irec- 
tory for Microsoft Windows 
2000 is a matter of upgrade vs. 
redesign. "Microsoft should 
have started over," he said. "Ac- 
tive Directory for Windows 
2000 is an upgrade that's not 
even compatible with NT or 
Windows 95/98. We threw out 



our directory design once. We 
built a new directory service and 
then made it backward compati- 
ble. That's what Microsoft 
should have done. You don't cre- 
ate a plane by adding wings to a 
car. You design a plane that flies 
and then figure out away to land 
it safely using wheels, like the 
ones they have on cars." 

As of Feb. 1, H assail said, 
Baan, J.D. Edwards, SAP and 
Cisco had committed to sup- 
porting Active Directory. By 
Feb. 17, the company demon- 
strated broad support from 10 
global launch partners and a 
number of smaller partners. All 
of those players are supporting 
Active Directory under Win- 
dows 2000— because that's the 
only place it runs. 

"Do you think M icrosoft's 
talking to Sun about Solaris?" 
Hein asked. 

A FEATURE, NOT A BUG 

Two days before the launch of 
Windows 2000, Novell pointed 
out a potentially serious securi- 
ty flaw in Active Directory. The 
flaw, described at www. novel I. 
com/advantage/nds/ad-security. 
html, allows administrators to 
access any objects on the net- 



work, even when they had been 
previously denied access. 

Consider the scenario Nov- 
ell describes: Because some 
departments, such as payroll, 
have sensitive information to 
which access must be restrict- 
ed, Active Directory provides 
mechanisms for restricting ac- 
cess through the use of ACL s 
(access control lists). 

H owever, says N ovell , admi n- 
istrators can override an object's 
ACL, even if their names aren't 
listed within the access control 
list. They do so by taking "own- 
ership" of that object; as the 
object's owner, they have full 
access to the ACL. Once they 
become owners, they can add 
their name to the AC L , and then 
begin using the resource. 

Shortly after N ovell 's account 
hit the Internet, Microsoft 
responded on www.microsoft. 
com/Windows2000/bulletins/ 
novellresponse3.asp. This page 
downplays the security hole, say- 
ing that this is a feature, not a 
bug: "M icrosoft believes, in real 
organizations, there are excellent 
reasons why an administrator 
should be able to reclaim owner- 
ship and control of an object." 

N ovell, clearly, disagrees. I 
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Shopping Cart Security Holes Leak Real Dollars 

ISS names 11 shopping carts vulnerable to form tampering by online buyers 



BY REBECCA ROHAN 

The "X-Force" team at Internet 
Security Systems Inc. issued a 
security alert detailing Web 
shopping cart vulnerabilities that 
allow shoppers to lower price 
tags and jack up discounts as 
they waltz out of online stores. 

The recent announcement 
from the security management 
solutions provider named 11 
e-commerce vendor shopping 
carts they deemed vulnerable. 
While some of the carts have 
been fixed or improved, that list 
is less important than assessing 
any software that allows users 
to submit information over the 
Web, whether you're buying it 
or unleashing it from the lab. 

The class of form vulnerabil- 
ities causing the problems is not 
new, but ISS (www.iss.net) has 
been watching the shopping 
cart industry during the grow- 
ing e-commerce rush, where 
the consequences of sloppy 
programming are measured in 
obvious dollars and cents. The 
culprits are sometimes hidden 
fields in HTML forms that hold 
the parameters of goods, in- 
cluding prices and discounts. 
While the HTML form con- 
taining the price of an item sits 
on a shopper's machine, he can 
edit the price and submit the al- 
tered form, which the shopping 
cart passes back to the system. 

Other breaches occur when 
a price appears in a URL, 
which the shopper alters before 
it's picked up by the CGI script 
and entered into the system. 
Still others depend on an 
HTTP header that can contain 
an altered referrer. 

STOP THE BLEEDING 

In its Feb. 1 announcement, 
ISS recommends upgrading to 
fixed versions of vulnerable 
software and, where that's not 
possible, verifying the price of 
each item ordered in the shop- 
ping cart application database 
ore-mail invoice. 

David Sarjantson, product 
manager for Axent Technolo- 
gies Inc. (www.axent.com), an 
e-security solutions provider, 
pointed out further dangers. "I n 
a URL, you can have embedded 
information that includes 
maybe a credit-card number or 
billing information— the refer- 
rer field has been around in 
HTTP and shows the URL of 
where the document last came 
from. If a hidden field was in it, 



and a page pops up as a result of 
that, when someone receives a 
confirmation page, they could 
have a look at the HTTP infor- 
mation that came with it. They 
could get the names of ma- 
chines, IP addresses and so 
on— and that kind of informa- 
tion doesn't even get picked up 
by the firewall. It can be quite 
dangerous," he said. 

"Developers should be look- 
ing at what hidden fields are 
used," Sarjantson continued. 
"Be careful a referrer field does 
not contain anything you don't 
want exposed. You might con- 
sider a hash function to make 
sure the information hasn't 
changed— to check that those 
hidden fields remain constant." 

Sarjantson emphasized the 
importance of having an experi- 
enced programmer on the team 
who knows which "little things" 
to beware of, such as using the 
GET method instead of POST. 
"The GET method and the 
URL vulnerability go hand-in- 
hand," said Sarjantson. "Switch 
to POST." 

Another place to look: 
"When the user switches be- 
tween HTTP and HTTPS-is 
there a vulnerability going back 
to HTTP?" asked Sarjantson. 
"They're going from secure to 
insecure. All of these checks are 
relatively easy for developers to 
go through." 

"A lot of developers neglect 
the fact that the Web and the 
Internet are insecure to begin 
with," said Sarjantson. "They 
want to deliver to a tight sched- 
ule, but some aspects of securi- 
ty they believe are there don't 
exist at all." 

"It's definitely a develop- 
ment issue," said Bill Orvis, 
security specialist with the U .S. 
Department of Energy's Com- 
puter I ncident Advisory Capac- 
ity Team (www.ciac.org). "If 
you build your pages from the 
prices stored on your Web serv 
er instead of using prices sent 
to you by the user, then you 
shouldn't have this problem. 
With every single one of these 
vulnerabilities, you have stored 
data on the client," said Orvis. 
"The thing to do is not store it 
on the client. Store a cookie on 
the client so you know who he 
is, but store the actual data on 
your own server." 

Sarjantson said if there's a 
third party involved, you might 
have to expose information, and 



he suggests checking to see that 
fields haven't changed. He 
would also consider expiring the 
Web page when a certain 
amount of time has elapsed 
since the last transaction. "Make 
the user fill out another form. 
M ake it clear that they have to 
finish within a certain time." 

BEYOND THE 
SHOPPING CART 

F orm-tampering vulnerabili- 
ties could be exploited in 
places besides shopping sites, 
according to Orvis. "When 
you're developing Web sites of 
this type, think about who has 
access to the information and 
imagine what would happen if 
they changed it," said Orvis. 
"This will lead you to discover 
holes in your design. I've dis- 
covered big holes doing that. If 
you store a prescription on 



somebody's Web browser, they 
could change it to anything," 
said Orvis, though he was quick 
to add he doesn't know of any 
drugstore sites that operate 
that way. 

Ann M arie Beasley, product 
group manager for Axent, said 
managers need to make sure 



security is a fundamental build- 
ing block of development, 
despite the rush to launch. 
"Consider security assessments, 
intrusion detection mechanisms, 
authentication and access con- 
trol mechanisms— they all need 
to be a fundamental part of 
the solution." I 



ELEVEN SHOPPING CARTS, 45 DAYS 



ISS's "X-Force" named 11 shop- 
ping carts that had form vul- 
nerabilities. ISS said in the 
45-day period following notifi- 
cation of the cart vendors, 
only one product "completed 
securing vulnerabilities": Ad- 
grafix Corp.'s Check It Out (ssl. 
adgrafix.com). 

ISS said seven had improved 
security: dPRetail Corp.'s @Retail 
(www.atretail.com), McMur- 
trey/Whitaker & Associates 
Inc.'s Cart32 2.6 (www.cart32. 
com), Cartlt Corp.'s Cartlt 
3.0 (www.cartit.com), Make-a- 
Store's OrderPage (www.make- 



a-store.com), ComCity Corp.'s 
SalesCart (www.salescart. 
com), BizCom International's 
SmartCart (smartcart.com) 
and Web Express' Shoptron 1.2 
(www.shoptron.com). 

Forty-five days after the 
notification, ISS said that three 
vendors had not provided 
fixes: Crested Butte Software's 
EasyCart (www.easycart.com), 
Intelligent Vending Systems' 
Intellivend (www.intellivend. 
com) and Baron Consulting 
Group Ltd.'s WebSiteTool (www. 
websitetool.com). -Rebecca 
Rohan 



XBRIDGE TRANSPARENTLY CONNECTS THE OLD AND THE NEW 

Tool links Windows 2000 r Web servers with OS/390 data 



BY EDWARD J. CORREIA 

Even with all the technological 
advances in the past 10 years, 
the world still cannot seem to 
rid itself of those pesky main- 
frames. Helping to bridge the 
gap between modern systems 
and legacy data are a host of 
middleware solutions, the latest 
of which is Xbridge Profession- 
al from Xbridge Systems I nc. of 
Sunnyvale, Calif. 

Xbridge Professional is de- 
signed to give developers a way 
to create real-time links to data 
residing on IBM's OS/390 
mainframes and present it to 
standard applications on ma- 
chines running Microsoft's 
Windows 9x, NT and 2000 us- 
ing standard development envi- 
ronments including OLE 
DB/ADO or Visual Basic. Pre- 
vious micro-to-mainframe links 

BUILDING AN XBRIDGE 



required time-consuming inter- 
mediate steps, such as message 
brokering, data replication or 
migration, which made real- 
time access difficult, according 
to the company. 

"A developer does not have 
to worry at all about the main- 
frame data," said Kevin Mur- 
phy, president and CEO of 
Xbridge Systems. "Once the 
template is set up for the data, 
it becomes Windows data, so 
the application thinks it is talk- 
ing to Windows data off of a 
local server," he said. After 
initial setup, a developer or 
systems person sitting at a 
Windows machine runs a GUI 
and selects which fields of 
mainframe data are to be used, 
M urphy explained. 

Targeted at any organization 
using Windows and OS/390 
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machines, the product takes a 
three-tiered approach to the 
legacy access problem. The 
mainframe component sits on 
the OS/390 data store and acts 
as an authorized component. 
This module uses a Resource 
Access Control Facility, the 
IBM OS/390 security method, 
to assure the integrity and secu- 
rity of corporate data, according 
to the company. Mainframe 
data can be stored by the Vir- 
tual Storage Access M ethod or 
by the Queued Sequential 
Access M ethod, and can be 
accessed by record or by indi- 
vidual fields. The server com- 
ponent for Windows NT or 
2000 servers establishes the 
mainframe connection, per- 
forms EPSID I C-to-ASC 1 1 data 
translations and the handling of 
multiple client access requests. 
A Win32 client agent maps data 
from the server and presents it 
to the requesting application. 

The product is available now 
directly from Xbridge Systems 
(www.xbridgesystems.com); us- 
age-based pricing starts at 
$20,000. 1 ncluded with the cur- 
rent version are text, OLE 
DB/ADO and data ActiveX 
formats. The company is sched- 
uled to begin offering support 
for HTML, Dynamic HTML, 
XM L and Java Script later 
this year. I 
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FLASHLINE TESTS 

< continued from page 1 

ing/sel ling/marketing milieu by 
offering IT managers— as well 
as developers/vendors— profes- 
sional-level checks for struc- 
ture, performance, server-side 
capacity and even custom at- 
tributes. Flashline uses testing 
tools under recent agreements 
with such vendors as M etamata 
Inc. and KL Group Inc. 

I n one tools deal, M etamata 
(www.metamata.com) will re- 
ceive royalties for Flashline's 
use of M etamata Metrics, 
which assesses global complexi- 
ty. "If the complexity of a piece 
of code is high, one possibility is 
to change that code— or to allo- 
cate more resources to testing 
it," said Sriram Sankar, Meta- 
mata's president and C E . 

Sankar said keeping down 
the complexity "helps the 
process of turnover from one 
programmer to another," and 
added, "If you measure com- 
plexity on a daily or weekly ba- 
sis, and you see something 
changing very rapidly, you need 
to take a closer look. M aybe a 
software engineer did not fol- 
low programming guidelines 




and is doing something in an 
ad hoc way. This allows the 
manager to keep track of what 
the programmer is doing and 
help them maintain the quality 
of the software." 

Another tool, M etamata Au- 
dit, will check Java source for 
style, programming errors and 
performance against a set of 
standard cod- 
ing practices. 
Flashline will 
use J2EE, 
which includes 
the ability to 
program cus- 
tom checks 
Youcansay through an 

your code passes API. Stack said 
the Flashline custom tests 
test, said com- will occur on 
pany president a client-by- 
Charles Stack. client basis: "If 
they have a set 
of their own parameters— that 
would be part of the subscrip- 
tion service." 

KL Group (www.klgroup. 
com) will contribute the J Probe 
Developer Suite, which in- 
cludes a code profiler and mem- 
ory debugger; J Probe Threada- 
lyzer, which checks deadlocks, 
stalls and race conditions; and 
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J Probe Coverage, which finds 
and measures untested code. 

Stack ran down some of the 
questions addressed by the 
three tool sets: 

First, "Is your code well- 
formed? Naming conventions, 
stylistic issues— all that goes to 
maintainability. How many ob- 
jects do you have? What's the 
number of properties per class, 
classes per component, depen- 
dencies on external compo- 
nents, depth of inheritance?" 
asked Stack. The lab will ex- 
plain the rule that was broken, 
the rationale for the rule and 
ways to fix the problem. 

"Once you have reasonably 
well-formed code, how well 
does it perform?" asked Stack 
with regard to the second type 
of testing. "Where are the func- 
tional bottlenecks?" 

The third type of assessment 
is load testing for server-side 
components. "H ow many users 
will it support?" Stack asked. 

Flashline currently supports 
six server types and will be 
adding others. "There will be 
platform options where you can 
say, 'Run this on' a particular 
combination of hardware and 
software," he said. 



BREAKING THE NEWS 

When tests reveal problems, the 
news goes back to the party sub- 
mitting the code for evaluation, 
but "we will have an option, 
probably not in the first release, 
of results going to a third per- 
son," said Stack. "Then [the 
client] can segregate develop- 
ment from quality assurance." 

Flashline may refer clients 
to rules that apply to errors, 
but, said Stack, "there may be 
situations where we're wrong- 
in the sense that there can be 
good design reasons for having 
software that's outside normal 
metrics." Flashline might say, 
"H ere's what the problem is, 
what it means and how to fix it," 
but the developer might say, "I 
know, but here's why I did 
that." Management would be 
aware of such situations and 
have input from both the test 
side and developer side to eval- 
uate the next move. 

F lashline doesn't seem to be 
eating Sun M icrosystems Inc.'s 
lunch, at least according to Ann 
Betser, Sun's senior product 
manager for Enterprise Java- 
Beans, who said that Flashline 
"is further proof that this mar- 
ket is taking off." 



Stack said the outsourced 
quality assurance will prove use- 
ful to in- house developers and 
to software vendors who can say 
their components "passed the 
F lashline tests," and to develop- 
ers bidding for jobs on Flash- 
line's Components By Design 
area. Stack also sees the QA 
as advancing the technology. 
"To create a truly reusable 
marketplace, the quality needs 
to be guaranteed," he said, 
adding, "Reuse is still more of a 
dream than a reality for most 
people, but it's clearly the right 
way to go— and where every- 
body is headed." 

This month, customer Dia- 
melle Inc. is scheduled to 
release JavaBean components 
designed for order processing, 
said its CTO, Suneet Shah. "We 
have an agreement with Flash- 
line to market our products 
through them, and the testing 
will also be helpful. It helps us 
internally because there's an- 
other body that's doing testing, 
which gives us a higher comfort 
level. And it helps ensure a cer- 
tain level of comfort to the buy- 
ers, in that the EJB have been 
benchmarked and that they will 
operate a certain way." I 



Meet the Database Developer's Boss 



After all these years, he still gets a rush from entering the data 
center. As a database developer in the early 1980s, he cut his 
teeth on IBM System/370 mainframes and CICS. Today, the department 
he manages uses System/390s for heavy lifting, while also building 
new applications using a three-tied model with Oracle running on 
Solaris on the back end. 

The transition from dumb terminals to client-server to the Internet 
isn't as crazy as it seems. One thing that hasn't changed: the too-short 
deadlines. When the CIO wants a new feature, she wants it yesterday... 
and that's particularly true with latest Web initiative. Allowing custo- 
mers to read their account status is easy. Allowing them to update 
those records in real time is no picnic. That's why the RFPs he's been 
sending to middleware vendors stress that all suppliers have to provide 
solid mechanisms for ensuring the integrity of the primary customer 
database. Plus the ability to access the multitude of databases that 
have cropped up over the years. 

The technical journals? He's long past the days of writing SQL 
queries or building tables - his job is to guide his company's 
progress by directing the development teams. He needs a 
wide-angle view of the entire spectrum of application develop- 
ment tools. Product roadmaps, not how-to tips and tricks. 
He needs to know the trends, the products, the alliances, 
the NEWS and what it all means. That's why he reads 
SD Times. 
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Ybu. This Time, You're Invited 



Keyn ote Addresses And 

Panel Discussions 

CA-World SM attracts the best and 

brightest talent. A sample of our 
former keynote 
speakers include: 
Microsoft's Bill Gates. 
Intel's Andrews. 
Grove and Craig R. 
Barrett, former 
President, George 
Bush, General Colin L. Powell, USA 
(Ret), and former President, J immy Carter. And this year's talent is proving 
just as impressive with Computer Associates Chairman and Chief Executive 
Officer, Charles B. Wang, President and Chief Operating Officer, Sanjay 
Kumar, and United States Senator and Astronaut, J ohn Glenn. 
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rechnical Sessions 

With over 3,000 sessions on virtually every facet 
of IT solutions during the conference you'll learn 
to get the most out of your Computer Associates 
solutions. Industry experts, including CA's own 
development staff, provide valuable insights into 
emerging technologies and industry issues. 



Networking Opportunities 
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Here is your chance to meet with CADevelopment and support 
staff. Listen to user experiences. Network with your peers 
and participate in Focused Network Groups. 

FREE Pre-ConFerence Education 

Pre-Conference Education is designed to educate 
IT professionals on the latest tools and technolo- 
gies offered in the industry today. These 
classes are provided to 
conference atten- 
" dees FREE OF 
CHARGE on April 8 
and April 9. 



Call The CA-World , 
1-877-CAWORLD (229-6753) Today! 
Or Visit Us At www.caworld.com. 

©2000 Computer Associates International, Inc., Islandia, NY 11749. All logos and product names referenced herein are tradem 



CA Education Services 

Attend any of the many CA-World 2000 
hands-on labs and let CA's own 
development and support staff show 
instruct you. 

Registration 

J oin the best and brightest professionals at CA-World 2000. 
To register, and for more information, visit 
www.caworld.com or call the CA-World Hot Line at 
1-877-CAWORLD (229-6753) or 1-631-342-6600. 




Exhibitor Opportunities 



If your company can only exhibit at one industry show 
this year, it has to be CA-World 2000. For Exhibitor and 
sponsorship opportunities, please call 1-631-DIAL 
EXHIBIT (342-5394). 
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Microsoft's Unfolding Embedded Strategy 

The road ahead for Windows CE and Windows NT Embedded 



BY LISA MORGAN 

"Windows on every desktop" is 
an antiquated notion, according 
to Vince M endillo, lead product 
manager in Microsoft Corp.'s 
Business and Enterprise Divi- 
sion. "Windows in every home" 
is the new mantra, reflecting 
Microsoft's focus on solutions 
for any devices other than PCs. 
The shift really translates to 
Windows everywhere, on street 
corners and factory floors, in 
homes, offices, cars, ATMs 
and wireless communication 
devices. F or developers, M icro- 
soft's embedded operating sys- 
tems represent a whole new 
world of opportunities. 

M endillo and his colleague 
Scott H orn, group product 
manager for Windows CE, love 
using the words "devices" and 
"appliances" as they talk about 
WindowsCE andWindowsNT 
embedded applications. 

The difference is, Windows 
CE -based devices are typically 
those that require power man- 
agement, instant-on capabilities 
and a small footprint, such as 
those required by cellular 
phones, intelligent pagers and 
handheld computers. 

By comparison, Windows 
NT Embedded-based devices 
use the full Win32 API, ad- 
vanced file systems, Simple 
N etwork M anagement Protocol 
(SN M P) and other compara- 
tively sophisticated features, 
and require as powerful a com- 
puting platform as standard 
versions of Windows NT 4. De- 
vices built with this operating 
system are envisioned to be 
point-of-sale systems, printers, 
copiers and server appliances. 

"We're focused on both PC 



and non-PC devices now," said 
M endillo. "Our strategy is to 
create a standard platform for 
embedded devices and servers 
that enables a persistent con- 
nection regardless of the envi- 
ronment. The point is to be 
able to get access to informa- 
tion anytime, anywhere." 

M icrosoft's three-pronged 
embedded strategy includes 
what M endillo called "persis- 
tent connectivity." The other 
two elements are support for 
various form factors (PC and 
non-PC devices) and support of 
objects such as those used in 
smart cards. In other words, 
M icrosoft is attempting to en- 
able "Windows everywhere" 
quite literally. As a result, Win- 
dows is becoming a popular 
solution not only for personal 
and enterprise computing, but 
also for set-top boxes, smart 
cards, batteries, intelligent 
street signs, bar code scanners 
and I nternet access devices. 

'POST-PC ERA' DAWNS 

Ron Workman, senior vice pres- 
ident of Insignia Solutions Inc. 
(www.insignia.com), agreed that 
appliances of all kindsare where 
the market is heading. H is com- 
pany provides Java solutions 
that run on top of various oper- 
ating systems, including Win- 
dows CE and Windows NT 
Embedded. 

"We're heading into the 
post-PC era," said Workman. 
"Traditionally the [PC desktop] 
strategy has been more, better, 
faster. We're moving away from 
that sort of complexity where 
everything resides on the PC. 
Now we're seeing a prolifera- 
tion of appliances that reflect 




the Java 'write once, run any- 
where' notion." 

The ability to plug non-PC 
devices into existing desktop 
and server infrastructures is 
extremely important, and one 
of M icrosoft's priorities. Devices 
are becoming more intelligent, 
often exhibiting almost PC-like 
capabilities. Although the 
extended functionality may be 
valuable in a stand-alone envi- 
ronment, the real value lies in 
the ability for devices to com- 
municate with 
each other and 
share informa- 
tion in a net- 
worked envi- 
I:-' *,""! ronment. 
"There is a 
Al I wealth of Win- 
Where'sthe dows NT and 

WindowsCE CE applica- 

market heading? tions out there 
Toward appli- written to the 
ances, according Win32 API," 
to Insignia's said M endillo, 

Ron Workman. pointing out 
that applica- 
tion portability is also valuable. 
Workman agreed that com- 
munication between devices 
and applications is important. 
He cited mobile applications 
such as sales-force automation 
as well as the emerging inte- 
grated systems and services that 
bring traditionally disparate 
solutions together for the 
users— like the new cars with 
navigation systems that also 
enable the drivers to make din- 
ner reservations. 

IT'S STILL A PC 

G eorge H enne, president of N S 
Basic Corp. (www.nsbasic.com), 
asserted that a PC by any other 



name is still a PC. "These de- 
vices really are computers. Any 
application that runs on a desk- 
top can run on CE." Henne's 
company offers a BASIC inter- 
preter and toolkit that runs na- 
tively on WindowsCE. By com- 
parison, most Windows CE 
development environments run 
on Windows NT workstations, 
with compiled apps then 
installed on WindowsCE . 

M icrosoft is working with a 
number of partners to help 
them build targeted products 
designed to address a particular 
application or market. 

Sometimes what results 
from these partnerships bene- 
fits the Windows developer 
community as a whole, such as 
DirectX components that give 
developers access to sound and 
graphics hardware. M endillo 
said M icrosoft is actively work- 
ing with OEMs, semiconductor 
manufacturers and partners to 
extend Windows out to yet 
more markets. 

For developers, the exten- 
sion of Windows into new mar- 
kets represents a plethora of 
career opportunities, according 
to M endillo and Horn. They 
said many Windows PC devel- 
opers are being recruited by 
appliance hardware and soft- 
ware vendors because they 
already know Windows. 

FROM WIN32 TO EMBEDDED 

"There's more demand for soft- 
ware developers in the embed- 
ded space than ever before," 
said M endillo. "We want to 
leverage PC developer knowl- 
edge for the embedded market- 
place." 

Toward that end, M endillo 



Red Hat, Intel Give Embedded Itanium Developers a Running Start 



With the recent release of 
GNU Pro Tools for IA-64, Red 
Hat Inc. claims to be the first 
to offer a development environ- 
ment for Intel Corp.'s forth- 
coming Itanium microproces- 
sor, formerly code-named 
Merced. 

The new tools will permit 
embedded and native develop- 
ers to begin creating applica- 
tions prior to the production 
of the new Intel processor, 
according to an announcement 
made at the Intel Developer 
Forum in Palm Springs, Calif. 



I n a further show of support 
for the long-awaited 64-bit 
chip, Red H at I nc. (www.redhat 
.com) last month released the 
source code for the Linux oper- 
ating system port to IA-64. The 
newly ported operating system 
is included with the GNU Pro 
tool kits for IA-64, along with 
the GNU Pro compiler and de- 
bugging tools. 

According to company re- 
ports, this marks the first time 
that development tools and a 
Linux kernel are available for a 
preproduction Intel processor. 



I n keeping with the L inuxtradi- 
tion, the new tools will be dis- 
tributed according to the open 
source software model. They 
are available for download at 
www.redhat.com/ia64. 

W ith the release of the I tani- 
um processor, Red H at plans to 
offer packaged and supported 
tools that it will bundle with its 
Linux kernel. 

The company will also offer 
installation support via e-mail 
along with an annual subscrip- 
tion service for obtaining prod- 
uct upgrades and new tools 



through a priority FTP account. 

Of course, Red H at isn't the 
only company working on IA-64 
operating systems and tools. 
Intel's Itanium Web site, http:// 
developer.intel.com/design/ia-64/ 
devinfo.htm, describes numer- 
ous projects under way, rang- 
ing from Microsoft's Win64 
(Windows 2000 64-bit) to 
Hewlett-Packard's HP-UX to 
64-bit Linux. 

Last year, Intel also created 
its own venture fund, designed 
to jump-start the development 
of Itanium projects. I 



said, M icrosoft is offering a rich 
set of APIs and development 
tools. The company also is pro- 
viding a common set of APIs 
for WindowsCE and Windows 
NT Embedded that helps 
shorten time to market. Last, 
but not least, the company is 
focusing on partner relation- 
ships to further decrease devel- 
oper time to market as well as 
provide more comprehensive 
tools and solutions. 

BSquare Corp. (www. 
bsquare.com) is one such part- 
ner. The company provides 
tools, applications and services 
that enable developers to slash 
the development times of 
Windows CE, Windows NT 
and Windows NT Embedded 
applications for all types of PC 
and non-PC devices. 

"CE and NT represent 
explosive markets," said Jeff 
McLeman, chief technology 
officer of BSquare. "[The mar- 
ket for non-PC] appliances will 
be 10 to 20 times larger than for 
PCs because we'll all have two 
or three of these devices— like 
intelligent refrigerators and 
set-top boxes— in our homes, in 
addition to PCs. All these 
devices are going to be net- 
worked. It's going to be like 
Star Trek minus the transporter 
and warp drive." 

N S Basic's H enne sees a lot 
of opportunity for CE devices 
in technologically underdevel- 
oped nations that don't have 
reliable power systems. "They 
may not have access to reliable 
power, but they have access to 
AA batteries," said H enne. "You 
can get a CE unit and develop 
applications on it." 

WINDOWS CE 3.0 IN 2000 

M icrosoft will release Windows 
CE 3.0, code-named "Cedar," 
later this year. (Many embed- 
ded systems are currently being 
designed with Windows CE 
2.x.) H orn claimed M icrosoft is 
being successful in getting 
"very well-known OEMs" to 
adopt the Windows platform. 
He said Windows CE 3.0 will 
be a significant upgrade that 
will work with Windows 2000 
and that Microsoft will be 
announcing an embedded ver- 
sion of Microsoft Windows 
2000 later this year. 

"All these operating systems 
have their place," said BSquare's 
McLeman. "We'll provide solu- 
tions for all of them. The 
biggest opportunity comes from 
the Win32 API and a base 
of five million Windows pro- 
grammers." I 
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In Embedded World, Small Is Big 

Scenix VM claimed as 'smallest programmable virtual machine' available 

(www.scenix.com), "and perfor- 



BY EDWARD J. CORREIA 

Scenix Semiconductor Inc., the 
self-proclaimed leader in the 
movement to embed the I nter- 
net into everything, hopes to 
make the job a bit easier with 
the release of the Scenix Virtual 
Machine, which occupies 3K 
12-bit words of on-chip pro- 
gram memory, making it the 
smallest programmable virtual 
machine available today, ac- 
cording to the company. 

Targeted at Web-connected 
kiosks, servers and other I nter- 
net appliances, the small-foot- 
print microprocessor emulator is 
designed to be used with the 
company's own SX series com- 
munications controller chips 
and, according to Scenix will 
turn in an execution rate of be- 
tween 100K and 1M bytecodes 
per second on a 50M H z 50M I PS 
Scenix SX52BD controller. 

The reason for the variation 
is because J ava bytecodes take a 
varying amount of time to exe- 
cute," said Chris Waters, princi- 
pal software engineer at Scenix 




mance depends upon the num- 
ber of peripheral functions [be- 
ing] run at the same time," such 
as multiple UARTs, which will 
take some MIPS away from 
what would be 
available to ex- 
ecute the Java 
bytecode, he 
said. 

Citing a 
lack of bench- 
marks for mea- 
suring Java ex- 
ecution per- 
formance on 
embedded sys- 
tems, Waters 
compared the 
Scenix VM 's 
1M I PS maximum execution per- 
formance to that of an 8051 mi- 
crocontroller, "which might run 
2 MIPS programmed in assem- 
bly language. So you're execut- 
ing in Java and getting perfor- 
mance which is not that much 
worse than what you're getti ng in 
atypical microcontroller." 



You can get high 
performance 
with embedded 
Java, according 
to Scenix's Chris 
Waters. 



When the 3K Scenix VM is 
used in conjunction with the 
SX52BD chip, which includes 
256 bytes of SRAM and 4K 12- 
bit words of flash program mem- 
ory, the remaining IK memory 
may be used for loading Virtual 
Peripherals, such as those pro- 
viding I/O functions, obviating 
the need for a dedicated chip. 
"[Developers] get the added 
benefit of developing with high- 
level interfaces of Java," Waters 
said, "which is much easier and 
faster than developing them in 
assembly [language]." 

Based on the J ava Card spec- 
ification published by Sun Mi- 
crosystems Inc., the Scenix Vir- 
tual M achine is compatible with 
any Java compiler, integrates 
with Java Virtual Peripherals 
and includes J ava object-orient- 
ed features such as inheritance, 
polymorphism, exception han- 
dling, static fields and methods, 
Waters said. 

Java Card features absent 
from this optimized VM include 
garbage collection, multi- 



threading, floating-point capa- 
bilities and long data types- 
features that Waters said were 
relatively minor for embedded 
systems. A Java Card-compliant 
version is under development. 

The Scenix Virtual Machine 
is available to developers in two 
parts. The Windows-based I D E 
and debugging environment, 
called Javelin, includes the J ava 
Virtual M achine built into a 
Scenix SX chip, along with 
some commonly used hardware 



functions executed in software, 
including I/O. 

The company said Javelin is 
suitable for device prototyping, 
but does not include VM source 
code. For that, developers must 
pay a one-time fee of $25,000, 
for which they receive the 
Scenix Virtual Machine source 
code and documentation on its 
internal workings. Javelin pric- 
ing is not yet set but is estimated 
to be less than $1,000. Both 
products are available now. I 



SCENIX CHAIRMAN SLAIN 



Scenix Corp. executives were 
shocked by the unexpected 
death recently of Steven 
Leung, the company's chair- 
man. Leung died from injuries 
sustained after being beaten in 
a karaoke bar in Beijing on Jan. 
18, according to police reports 
received by the family. Leung 
was treated at a local hospital 
and flown to the U.S., where he 
succumbed, it was reported. 

"He was a friend of the com- 
pany, and it is a great personal 
and emotional loss to many of 
us here," said Bulent Celebi, 
president and CEO of Scenix, 



which is based in Mountain 
View, Calif. Leung was 52. 

Along with his management 
team, Celebi has been running 
the company since Leung, a 
co-founder of Scenix, brought 
him on to assume his current 
duties in January 1999. "The 
death of Leung will have no di- 
rect impact on the operations 
of the company," Celebi said. 
Leung had left the company 
and had started his own ven- 
ture, an e-commerce start-up 
business, and was in China to 
attend the ChinaEcom.com 
conference. -Edward J. Correia 



Premia Estimates Project Costs 

CostWright helps managers keep in control 

Premia Corp. announced this different methods of doing esti- 



week that CostWright, its new 
software project cost-estima- 
tion tool, will be available later 
this month. 

Premia (www.premia.com) 
decided to launch CostWright 
in the wake of several reports 
that show a success rate for 
project development— mean- 
ing a project completes on time 
and under budget— at around 
20 percent, according to Cost- 
Wright's product manager, 
Mark Weisgerber. 

"Project managers have 
gone on a gut feeling, or polled 
their teams of developers," said 
Weisgerber. "CostWright gives 
them a tool to take a large his- 
torical database of projects that 
is updated periodically and 
gives more refined estimates." 

CostWright is a self-stand- 
ing application that runs on 
Windows but can estimate pro- 
jects being developed on or for 
any platform. Also, the product 
will export its database to any 
project management tool that 
can import an M PX file, Weis- 
gerber said. The price has yet 
to be determined. 

Among CostW right's fea- 
tures is the inclusion of seven 



mates. This allows project man- 
agers to pick and choose, as one 
estimator might work better for 
an embedded systems project 
while another might be a better 
selection for a general server 
application. 

"The tool should have a 
plus-or-minus-5-percent accu- 
racy rate depending on the ac- 
curacy of input," Weisgerber 
said. 

Premia also plans to offer 
training courses to help man- 
agers refine their knowledge to 
define projects, Weisgerber 
said. The courses will be of- 
fered at an additional cost to 
the software. 

CostWright also can assist 
with "what-if" scenarios, Weis- 
gerber said. If a manager runs 
the program and realizes the 
time frame might take too long, 
he can cut a feature and get a 
new estimate of time or cost. 

Of course, project failures 
are not always the fault of the 
development team. "This tool 
will help a project manager to 
make a case for a reasonable 
time frame [to complete the 
project] and budget," Weisger- 
ber said. I 



TRANSMETA SAYS, 'IF WE BUILD IT, OEMS WILL COME' 



Crusoe's low-power consumption 'ideal' for 

Transmeta (www.transmeta. 



BY EDWARD J. CORREIA 

As the dust around Transmeta 
C orp.'s recent C rusoe processor 
release begins to settle, OEMs 
are left with the decision of 
whether to invest in developing 
prototypes using a new technol- 
ogy and a new company, or to 
stick with their established sup- 
pliers and methods. 

According to Transmeta 
Marketing Director Ed McKer- 
nan, developers will be attract- 
ed to the Crusoe circuits over 
those of established companies 
because of their suitability to 
task. "The PC market of the fu- 
ture will be toward mobile In- 
ternet computing and away 
from desktops," he said, adding, 
"C rusoe is the best platform for 
a full range of devices." Crusoe 
processors will be fabricated by 
IBM Corp. 

"We have created something 
unique," M cKernan said of the 
company's low-power x86-com- 
patible mobile processors. "The 
way we look at the $500 to 
$1,000 PC market today, there 
is no mobile device that is suc- 
cessful. As [Crusoe-based] de- 
vices begin to be released in the 
second and third quarters, we 
believe we will be validated." 



com) has been tight-lipped 
about its customers, revealing 
only that S3 is developing a 
WebPad-style device using the 
Crusoe chip. 

The Crusoe model TM 3120, 
claimed to be equivalent to I n- 
tel's 333MHz Pentium II 
processor, has been optimized 
to run mobile L inux and is rec- 
ommended for handheld de- 
vices. The TM 5400 is designed 
for ultralight notebooks and 
palmtops and runs Microsoft's 
Windows at speeds equivalent 
to a 500MHz mobile Pentium 
III, according to Transmeta. 

The processors require 
about one-tenth the power of 
their mobile Intel or AM D 
counterparts, said McKernan, 
and cited that Intel's forthcom- 
ing Willimet mobile processor 
will consume about 60 watts of 
power compared with Crusoe's 
1 to 2 watts. 

The TM5400 will be avail- 
able in 500MHz and 700MHz 
speeds, which will sell for $119 
and $329. The 333M H z 
TM 3120 will cost $65, and the 
400MHz version will sell for 
$89. 

The new chips have similar 



mobile developers 

power characteristics of Strong- 
ARM and M IPS processors but 
with the performance capabili- 
ties of Intel or AM D chips, 
McKernan said. "The problem 
with the StrongARM and the 
MIPS is that they don't run the 
Internet applications like the 
Adobe Acrobat plug-in, the 
RealAudio, RealVideo, Macro- 
media Flash-type plug-ins. This 
is where having an x86 processor 
with an x86 operating system 
like Linuxreally shines," he said. 

The secret to this achieve- 
ment is the migration of about 
75 percent of the logic transis- 
tors to software, plus Code 
Morphing, a process of moni- 
toring the CPU and optimizing 
its power usage. "Having this 
layer of software allows us to 
monitor the activity of the user 
and the application, and to vary 
the frequency and the voltage 
of the processor precisely so 
that we can extend battery life," 
said McKernan. 

The company also is working 
on a public release of a com- 
pressed mobile Linux with en- 
hanced power management 
that will fit into a 16MB foot- 
print, and will include X Win- 
dows and a N etscape browser. I 
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EDITORIALS 

Atlas Shrugged 

On Feb. 17, with much fanfare, Microsoft Corp. 
shipped Windows 2000, the successor to Windows 
NT 4. For the most part, the world yawned. A couple of 
visits to the local CompUSA showed a nearly empty 
store— a far contrast to the waiting-in-line-at-midnight 
rush to purchase Windows 95. A few individuals poke at 
the Windows 2000 display. That's all. 

The media, too, was quiet. In San Francisco, where Bill 
Gates launched his company's latest flagship product, the 
local AM news station provided blow-by-blow of the intro- 
duction, but focused more on actor Patrick Stewart and the 
live performance by Santana. KC BS's reporter downplayed 
the event, repeatedly stating, "It's an operating system for 
business." In short, Win2K caused not much more stir 
than,oh,Y2K. 

Maybe even less. On Thursday, Feb. 10, Microsoft's 
stock closed at 106. A week later, the day of the launch, it 
closed at 99 5/8, a drop of 6 percent, and about 16 percent 
off its high. D uring that same week, the N ASD AQ climbed 
1.4 percent. Perhaps Atlas didn't shrug, but Wall Street did. 

To us, the most interesting feature of Windows 2000 is 
Active Directory; see our coverage on page 10. If used 
properly, AD could simplify the integration of applications 
onto an enterprise network, while providing a mechanism 
for centralized management. But by no surprise, since Ac- 
tive Directory is Windows 2000-specific, adopting that 
technology will tie you even more closely to Windows. 

Similarly, the upcoming M icrosoft Visual Studio 7 offers 
tantalizing technologies, including more enhancements to 
Visual Basic and a deepening commitment to XML. 
There's no doubt that with Visual Basic and its component 
model, M icrosoft hit the ball out of the park, as the growth 
of third-party VBX/OCX marts like ComponentSource 
demonstrates. We can't help but think that if the Linux 
community truly wantsto bring Big Bill down, they'll need 
to create a similar component model, as well as a thriving 
community of component builders and sellers. 

What About Linux? 

Linux is coming on strong, and you don't need to see 
Wall Street send Linux-oriented initial public offer- 
ings sky-high to notice the trend. The recent $2.44 billion 
purchase of I nprise Corp. by Corel Corp. is another sign 
that the market for Linux is growing. With this purchase, 
in fact, the industry will see the first development-tools 
powerhouse for the Linux platform. But even without 
Corel, some ISVs are seeing steady increases in their 
demand for L inux development tools. I n fact, at platform- 
independent tools provider ParaSoft Corp., Linux has 
passed Windows NT as the No. 2 sales platform. 

Corel is innovative in another way. At first, Linux was 
initially viewed as a low-end server platform, particularly 
when paired with the open-source Apache Web server, 
with its desktop appeal limited to power users and open- 
source developers. But now, with its latest release, Corel 
is targeting the desktop as well. 

Besieged on all sides— Sun and Novell on the server 
front, Corel on the desktop, and the U .S. Department of 
J ustice's antitrust case hanging overhead like the sword of 
Damocles— it will be interesting to see what Microsoft 
does next, i 



GUEST VIEW 



KEEP YOUR EYE ON THE PROCESS 



You have chosen a develop- 
ment environment, recruit- 
ed a technically competent 
team and otherwise laid the 
groundwork for a successful 
software development project. 
One item may still stand 
between success and failure 
of your project. It is quite 
frequently overlooked, 
even though it does not 
need to break your bud- 
get, and it is entirely 
within your control as 
manager. It's process. 

Process is too easily 
disregarded in the rush 
to code. M anagement, 
users, clients and VCs 
are all in a hurry to see a demo, 
and thus put a lot of pressure 
on the developers to ignore 
thorough requirements gather- 
ing, and functional and techni- 
cal specification writing. These 
steps take time— and there is 
no dazzling demo at the end, 
nothing for the end user or 
client to try 'hands on,' nothing 
to show a VC except documen- 
tation. Documentation, espe- 
cially technical specifications, 
will not usually inspire funding, 
nor are they eye-catching to 
the investment community in 
today's flashy e-world. 

According to the Standish 
Group's Chaos Report, pub- 
lished in 1995, 31 percent of all 
software projects were cancelled 
before completion. Of the pro- 
jects which were not cancelled, 
53 percent cost 189 percent of 
their original estimates. Only 16 
percent of all software develop- 
ment projects were completed 
on time and on budget, but this 
was not a true victory, since the 
software developed generally 
had less than half of the original- 
ly proposed features and func- 
tions. Although lack of process 
is not the only reason for such 
dismal statistics, we propose that 
it is one of the major reasons. 

You may argue that new 
technologies such as Web- 
based development, U M L , 
application servers, Java and 
the like may have improved 
these statistics. Technology cer- 
tainly does have a positive 
impact on the success rate of 
software projects and time to 
market, but it's not a panacea. 

The effects on the morale of 
the programming and develop- 
ment staff could be devastating 
if a process is not established 
and followed. In working with 




companies that do not have an 
established process, our staff 
reports increased stress levels, as 
there is pressure to hurry up and 
do something, to 'finish' the pro- 
ject, but neither the 'something' 
nor the finished result is de- 
fined. The morale of the team 
further dips as they feel that 
their efforts are leading 
them only to project fail- 
ure, and leading you to 
higher staff recruitment 
and retention costs. 

ONE EXAMPLE 

victoria As developers, we at N o 
girdziunas Magic implement each 
phase of our client's 
project with our own software 
development process, compris- 
ing five major phases. Although 
these phases are not new, in our 
experience with clients we see 
that they are constantly over- 
looked and ignored. 
Phase One is writing the 
functional requirements 
specification, which de- 
scribes what the system 
is going to do, or its 
functionality. 

The second phase is 
a technical design speci- 
fication, which details 
how, technically, the functional- 
ity will be implemented. Dur- 
ing the specification phase, we 
find it is essential that the pro- 
grammer who will implement 
that part of the code writes that 
part of the specification; this 
insures that the programmer 
really understands the problem 
and has analyzed and solved it. 
If a technical writer writes the 
specification, you will get a 
somewhat better style of speci- 
fication but worse software. 

I n the third phase, upon iter- 
ations with our clients and 
receipt of client approval, we 
code modules and integrate the 
modules as quickly as possible, 
even though some modules may 
be shells. This code- integrate- 
code- integrate cycle, along with 
weekly code reviews, keeps us 
from falling into the syndrome 
of "the first 90 percent of the 
project taking 90 percent of the 
time, and the last 10 percent of 
the project taking the remaining 
90 percent of the time." 

U nit testing, functional veri- 
fication testing, systems inte- 
gration testing and production 
level testing follow as the fourth 
phase. During this phase, we 
ensure that the project meets 
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the metrics and standards set 
by Quality Assurance. If we 
follow these four steps reli- 
giously, the fifth phase, delivery 
to client site and on-site imple- 
mentation, becomes simple. 

MORE DETAILS 

Our functional requirements 
specification documents how 
the system looks and works 
when viewed from the user's 
perspective. Typically, more 
than 95 percent of the actual 
screens will be shown, with 
their function and use ex- 
plained in detail. 

The text of the functional 
specification becomes the 
foundation of context-sensitive 
online help in the final prod- 
uct. This document is also the 
basis of requirements testing, 
thus bringing Quality Assur- 
ance into the picture at this 
first phase. The client 
liaison to our project 
team can review inter- 
mediate versions of this 
document and request 
changes. The client sees 
what their application 
will look like before one 
line of code is written, 
which ensures that the 
client gets a system that exactly 
meets their needs at the lowest 
possible cost. 

In the second phase, we 
write the technical design spec- 
ification using UML (Unified 
Modeling Language) diagrams 
to draw a "schematic" of the de- 
sign of the proposed system. 
It explains in detail the system 
design— the structure of the 
system components, how they 
interact and how data is trans- 
ferred and transformed as it 
flows through the system. 

This detailed plan signifi- 
cantly reduces the time to code 
and test any software system 
and results in a much more ro- 
bust and reliable system. This 
specification also functions as a 
maintenance manual, to docu- 
ment the design and signifi- 
cantly reduce both life-cycle 
cost and the cost of modifying 
the system in the future. 

Finally, in the coding and 
testing phase, our coding stan- 
dards and review procedures 
ensure the skillful and efficient 
implementation of the design. 
Coding is done, like both speci- 
fications, to a detailed project 
plan with both Gantt charts and 

► continued on page 19 
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INTEGRATING ENTERPRISE APPLICATIONS 



It's a nasty problem— one of 
the nastiest, many would 
agree. Creating and imple- 
menting a strategy for enter- 
prise application integration, or 
EAI, requires a big budget, a 
talented team, a big budget, 
hands-on support from systems 
vendors and consultants, 
expensive integra- 
tion products and 
a lot of time and 
patience. Oh, did 
mention a big budget? 

One particularly vex- 
ing challenge facing any 
planned EAI project is that 
there isn't a single thing called 
EAI, because that newly popu- 
lar buzzword implies that EAI 
is a tangible problem with a 
definable process and a clear 
set of goals that determine a 
solution set. It's none of these; 
there's no one-size-fits-all EAI 
solution— and don't let an EAI 
vendor or consultant tell you 
differently. Is your goal to 
breathe new life into stovepipe 
applications by adding messag- 
ing interfaces? Are you trying 
to integrate packaged applica- 
tions? Is the end result sup- 
posed to be data mining? EAI 
can be all of those to your orga- 
nization, or none of them. 

Imagine my distaste with 
vendors who try to tell me that 
they've got the "best of breed" 
EAI solution. Imagine my 
delight when I found an excel- 
lent book from David S. 
L inthicum that describes all of 
the various aspects that might 
be considered part of an EAI 
problem, process and solution. 
If you're trying to get a handle 
on what EAI might mean 
for you and your organization, 
his aptly named "Enterprise 
Application Integration" cov- 
ers all the bases. Although 
Linthicum is employed as 
CTO of Sega Software, his 
book— as with all his writing, 
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such as his column in Enter- 
prise Developer— is remark- 
ably free of perceptible bias. 

WHAT IS EAI ANYWAY? 

The book begins with a discus- 
sion of EAI, plus the presenta- 
tion of various ways of defining 
the concept. My favorite, 
and the one I use 
most frequently, is to 
combine multiple 
disparate applications 
into a single virtual ap- 
plication. But there's 
more to EAI than a clever con- 
cept: Because it's expensive, 
there must be a business reason 
to integrate those stovepipes, 
enterprise resource planning 
systems or even external apps. 
Linthicum doesn't spend a lot 
of time on that issue, and it 
would be nice if he spent more, 
perhaps with a case study or 
two, but he does a fair job of 
framing EAI in business terms. 
Plan on spending a lot of 
time with chapters two through 
five— not because they're diffi- 
cult to read, but because their 
meaning is essential to concep- 
tualizing the essence of EAI. 
In those chapters, Linthicum 
describes in very definite terms 
four broad categories of El A: 
data-level, application-inter- 
face-level, method-level and 
user-interface-level. Those four 
levels describe the basics of 
how information is pulled out 
of one existing application and 
fed into another one. 

Do you want to go right to 
the data store by writing to the 
back-end database? Does each 
application offer published and 
documented APIs for which 
you can write external unidirec- 
tional or bidirectional access 
programs or scripts? Can you 
create methods, or business 
logic, using distributed objects 
or an application server? Or 
must you resort to simulating a 



legacy app's user interface, per- 
haps scraping 3270 or 5250 
screens or encapsulating them 
with objects? 

Until you understand the 
distinctions (and perhaps have a 
handle on which of your appli- 
cations can be accessed with 
which types of EAI), you can't 
develop a strategy for truly inte- 
grating them. Fortunately, the 
author's explanations make the 
distinctions crystal clear. 

Once over the hump, move 
forward to chapter six, which 
introduces processes for tack- 
ling EAI problems. That feeds 
nicely into middleware— the 
technological glue that binds all 
the applications together. 

Linthicum serves his audi- 
ence well by holding his 
in-depth, six-chapter 
discussion of mid- 
dleware until this 
point. Too many 
companies choose 
middleware based 
on flavor-of-the- 
month without re- 
gard for the fact that 
each of those tech- 
nologies solves a different prob- 
lem, and many solutions will re- 
quire multiple types (or layers) 
of middleware, not a slavish de- 
votion to the latest fad. 

It would have been nice if 
the book went deeper into com- 
peting technology implementa- 
tions, such as D COM vs. COR - 
BA, which does have some cov- 
erage, or Microsoft's MSMQ 
vs. IBM's MQSeries. In those 
cases Linthicum is breezy, with 
throwaway lines like "M QSeries 
is the 600-pound gorilla... it can 
do just about anything it pleas- 
es," contrasting with "MSMQ 
provides the best tool support 
'out of the gate,' simply because 
it has been developed by 
M icrosoft." Harumph. 

The next section of "Enter- 
prise Application Integration" 




discusses general issues 
surrounding packaged appli- 
cations—in this case, Linth- 
icum focuses on SAP and 
PeopleSoft. It's an overview, 
nothing more: Fourteen pages 
on integrating R/3 using El A 
and middleware can't be 
anything but. 

As the book winds toward a 
close, there's another breezy 
chapter on Extensible M arkup 
Language and related stan- 
dards; you won't gain much 
depth on XML from here 
(read "XML: A Manager's 
Guide," reviewed last issue, 
for a solid nonprogrammer's 
education), but the author 
does tie XM L in with EAI, 
which is typically not one of 
the uses being touted by 
XML's major proponents, al- 
though it's a natural fit for 
messaging. And indeed, the 
next chapter touts 
messaging broker- 
ing, which Linth- 
icum calls "the pre- 
ferred EAI engine." 
Message brokers, 
in case you're not 
familiar with the con- 
cept, are servers that 
use a hub-and-spoke 
model to bridge multiple sys- 
tems together, translating mes- 
sages, distributed objects or 
business logic as appropriate. I 
like the definition "message bro- 
kers are middleware's middle- 
ware." Although Sega Software, 
Linthicum's employer, makes 
and sells a message-brokering 
product, he gives equal ink to 
other players in that market. 

Bottom line: EAI is impor- 
tant, whether you're running 
mainframes, ERP or other 
systems. It can also be confus- 
ing. If you'd like to find a single 
book that makes it less confus- 
ing, this is the one to read. I 

"Enterprise Application Inte- 
gration." David S. Linthicum. 
Addison Wesley L ongman, 2000. 
Trade paper, 374 pages, $39.95. 
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< continued from page 18 

resource allocation. The coding 
of the project is done in a series 
of three to five builds so that 
the components of each phase 
must exchange data and com- 
mands reliably for each build. 
All the functionality planned for 
implementation in that build is 
debugged and tested complete- 
ly before going on to the coding 
of the next build. This prevents 
the end-product schedule slip- 
page typical in most software 



projects done elsewhere when 
component interface incompat- 
ibilities are exposed during a 
single end-project integration. 

We update and refine the 
project schedule after comple- 
tion of the functional specifica- 
tion and again after the comple- 
tion of the technical specifica- 
tion. D uring coding and testing, 
the client receives variance re- 
ports and actual project plan re- 
visions at the completion of each 
build. This is the essence of the 



"No Magic Process." Conscien- 
tiously followed, this process 
keeps the client in control of the 
project, keeps communication 
flowing between the developers 
and staff on the client side, and 
results in an "on-schedule within 
budget" completion of a soft- 
ware development project. 

D o these steps seem simple? 
Of course they do— there's no 
magic here. For you to bring 
your development projects un- 
der control won't take magic ei- 



ther—just hard work and atten- 
tion to the basics. So stop look- 
ing for the mythical silver bullet 
and stick with the process, and 
you, too, can beat the odds. 
Even though your VC may ini- 
tially yawn at the word 
"process," the marketplace will 
cheer the results. I 

Victoria G irdziunas is president 
and Paul Duncanson is CEO of 
No Magic Inc. (www.nomagic. 
com). 
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Linux Ain't Peanuts Anymore 

BIG MERGERS MEAN NOT ONLY BIG DOLLARS, BUT BIG CORPORATE INTEREST 



BY ALYSON BEHR 

Vendors have seen such a sig- 
nificant increase in demand for 
Linux-based enterprise prod- 
ucts that most of those who 
don't already have a product 
release to satisfy the clamor at 
least have a beta to talk about. 
For many of these vendors, 
Linux is not their lead platform; 
however, they see enough 
promise because of their cus- 
tomers' requests that they've 
increased both R&D and mar- 
keting resources, in some cases 
by over 50 percent, and some 
are brokering mergers based on 
Linuxdemand. 

The recent Corel Corp. and 
Inprise Corp. merger agree- 
ment, valued at $2.44 billion, 
will consolidate the software 
development prowess of 
Inprise/Borland with Corel's 
desktop Linux operating sys- 
tem. The combined company 
may create a dominant single 
source for the Linux operating 
system, applications and devel- 
oper tools. 

According to Michael Shin- 
dell, director of product man- 
agement for Linux tools at 
Inprise/Borland, "Half of our 
marketing and R&D resources 
are going into Linux products. 
Currently, most of the effort is 
going into Kylix. Kylix will bring 
native rapid application tools, 
D elphi and C ++ B uilder, to the 
Linux platform." 

DEVELOPMENT-TOOL HOLE 
SPELLS OPPORTUNITY 

Shindell acknowledged that 
there's a large hole in the area of 
application development for 
Linux, and said that Kylix is po- 
sitioned to bring a development 
tool set to Linux that simplifies 
all of the complex technologies 
from desktop to Internet to 
distributed development. "Over 
the past five years, most compa- 
nies' use of Linux has been pri- 
marily very task-oriented: 
e-mail server, Web server or 
router specific, and mainly for 
Internet appliance uses," he 
said. "Linux has worked very 
well in that capacity, but it's 
been very slow to be used as an 
application platform, either as 
an application server, a database 
server or a general-purpose 
server; or on the client side, as 
a client application. This has 
been primarily because of the 
lack of application availability." 




Half of Inprise's 
marketing and 
R&D resources 
go into Linux, 
according to 
Michael Shindell 



Shindell said that Inprise 
(www.inprise.com) has already 
brought most of its other prod- 
ucts— I nter- 
base, Visibro- 
ker, CorbaOrb, 
Application 
Server and J 
Builder 3.0 
Foundation- 
over to Linux. 
Earlier this 
year, Inprise 
surprised the 
development 
community by 
lobbing a free 
download ver- 
sion of J Builder 3 onto its site. 
Shindell said that downloads 
of its Linux version outnum- 
bered the Windows version 
two to one. 

Inprise/Borland conducted a 
survey that 24,000 developers 
participated in. Shindell said that 
over 70 percent of those devel- 
opers said they were looking for 
RAD tools like Delphi and C 
Builder. Only 25 percent of 
those developers were interested 
in device driver development. 
I nstead, their interest was in ap- 
plication, utility, client/server 
database and I nternet Web serv- 
er side development. "That's 
great news for us, because that's 
exactly what we do," said Shin- 
dell. "It really told us that Linux 
was turning the corner to an ap- 
plication-oriented platform." 

While Shindell doesn't see 
Linuxcatching up with M icro- 
soft's W indows or Sun's Solaris 
in market share anytime soon, 
he believes that, technologi- 
cally, Linux is every bit as sta- 
ble and delivers higher perfor- 
mance right now. H e said that 
the primary barrier Linux 
faces in gaining market share 
in the enterprise is the invest- 
ment that companies have 
made in Windows-based appli- 
cations, infrastructure, train- 
ing and support, and that it 
will take some compelling rea- 
sons for these companies to 
turn to L inux. True to his opti- 
mism, he believes that Linux 
will be able to offer these in 
the near future. "The future is 
really what we're excited 
about. We're very excited to 
see new uses for Linux in the 
direction of embedded com- 
puting, clustering and things 
that we haven't even heard 
or dreamed of yet." 



A RATIONAL APPROACH 

Not all vendors have unlimited 
resources to throw at building 
market share. Tool vendor 
Rational Software Corp. (www. 
rational.com) is taking a much 
more cautious approach. Ac- 
cording to Claudia Dent, vice 
president of Rational'sWindows 
Suite Business U nit, the compa- 
ny currently supports applica- 
tion development for Linux 
with C I earCase 4.0, a configura- 
tion management app for dis- 
tributed teams. Rational's cus- 
tomer demand is evenly spread 
between Windows and Unix. 
D ent said that 50 percent of its 



customers are Windows based. 
The other half is a mix of U nix 
and L i nux "0 ur growth rate has 
clearly been in the Windows en- 
vironment, but now we're see- 
ing a renewed interest in Unix 
and Linux particularly for larger 
environments," said Dent. "Our 
customers want to see our 
entire suite of products running 
on Linux; the first demand was 
for ClearCase." 

D ent sees demand for Linux 
across multiple segments, in- 
cluding Web application devel- 
opment, e-device management, 
telecommunications and infra- 
structure. "We've seen the most 
demand for Linux offerings 
in the Web development area. 
I can't predict whether Linux 
will catch up with Windows in 
the near term," she said. 



While Rational recently an- 
nounced that it will port prod- 
uct over to I ntel's I A-64 proces- 
sor line, Dent would only say 
that this will occur over the next 
year. She did not see barriers to 
Rational's support for Linux, 
stating, "We have a history of 
providing our development 
tools for platforms that our cus- 
tomers are actively requesting, 
and we view it as another plat- 
form that we need to aggres- 
sively support." That said, she 
would not commit to a time 
frame for further product sup- 
port of Linux. 

FROM UNIX TO LINUX 

Vendors that teethed on Unix 
are more comfortable allocating 
precious R&D funds toward 

► continued on page 22 



ONE LINUX, UNDER LINUS, INDIVISIBLE... 

Even in the open-source movement, brands and marketing matter 



BY DAVID RUBINSTEIN 

As more programmers, soft- 
ware development teams and 
companies move toward wide- 
spread acceptance of the Linux 
operating system, a debate is 
raging within the community 
about its fragmentation. 

Will fragmentation prove 
fatal to the Linux's evolution 
as an enterprise platform, as 
some fear, or is it a natural 
and inevitable result of the 
disparate factors that led to 
its development in the first 
place? 

The answer, as with all ques- 
tions, lies with whom you ask. 

Beau Vrolyk is the senior 
vice president of computer 
systems at Silicon Graphics 
Inc. (www.sgi.com), which 
makes servers upon which 
Linux sits even as it continues 
supporting its own Unix vari- 
ety, Irix. Vrolyk stated SGI's 
case rather bluntly: "If we 
allow [Linux] to fragment, 
we will miss the best opportu- 
nity we ever had." 

Yet, the man who created 
Linux itself, Linus Torvalds, 
makes a strong argument that 
Linux will grow and spread into 
new areas of computing, with- 
out breaking up. 

The open-source nature of 
Linux is such that software 
developers must share any 
modifications with others, 
preventing any one version 
from dominating, Torvalds 
emphasized in an address 
at the recent Linux World 
Expo in New York. 



"[The license] forces every- 
one to live in harmony," 
Torvalds said, "even if they 
don't want to." 

The fear, of course, comes 
from the need of Linux ven- 
dors to keep the financial mar- 
kets happy. Those are the guys, 
you may recall, who were 
behind the huge run-ups in 
capitalization for such vendors 
as Red H at Inc. and VA Linux 
Systems I nc, and the same fel- 
lows who would like to see 
larger market share and more 
return on their dollars. Each 
vendor may be forced to try 
to come up with versions that, 
like many developers them- 
selves, may not work well 
with others. 

Vrolyk believes Linux can 
be extended without damaging 
it. "Companies can differenti- 
ate themselves through packag- 
ing, overlays, support... without 
differentiating themselves 
through variations in the core 
operating system," he said. 

According to a recent IDC 
survey, 24 percent of business 
operating systems now run 
Linux, up from 16 percent a 
year ago. Meanwhile, Win- 
dows, with NT and 2000, has 
remained stagnant at 38 
percent over that time. The 
remainder is split between 
versions of Unix and Novell's 
NetWare. There has been 
speculation that the long delay 
in rolling out Windows 2000, 
originally targeted for mid- 
1999, has given Linuxachance 
to pick up steam. 



CUSTOMERS WANT 
TRUSTWORTHY BRANDS 

SG I 's Vrolyk said that branding 
is critical to the success of 
Linux vendors, and that it's the 
acceptance of a brand that 
enables a customer to comfort- 
ably buy the product. "People 
are desperately going to try to 
brand Linux," he said. "Funda- 
mentally, all vendors are pro- 
viding quality assurance and 
support of some sort. It all 
comes from the same source 
tree. To the customers, brand 
matters deeply. That's what 
allows IT managers to sell the 
use of Linux to their bosses." 
H e added that if Red H at, SuSe 
Inc. and VA Linux fail to estab- 
lish strong, identifiable brands 
that customers can trust, they 
will not succeed. 

In the future, he said, cus- 
tomers will demand a single- 
server operating system and 
will balk at paying so much for 
support. Citing the Unix exam- 
ple, which has been splintered 
into proprietary business sys- 
tems, Vrolyk hopes Linux can 
remain widely functional no 
matter which version a com- 
pany chooses to run. 

Vrolyk said the industry 
must move in that direction, 
pointing up that IBM Corp., 
unlike M icrosoft Corp. and Sun 
Microsystems Inc., is moving 
toward a layered business mod- 
el, while the other two giants 
remain in what he termed a 
closed, monolithic, vertically in- 
tegrated model— "a model 

► continued on page 23 
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this burgeoning community. 
ParaSoft Corp. (www.parasoft. 
com) was born as a Unix shop 
but has recently seen the need 
to support Linux. Jim Clune, 
product manager for I nsure++, 
a run-time error and debugging 
application, said, "We're there, 
and [Linux] is becoming an 
increasingly important platform 
for us. Recently, it's gained 
ground as our second- biggest 
seller." Solaris holds the No.l 
spot, with Windows NT's sales 
slightly lower than Linux's. Para- 
Soft's I nsure++ R&D resources 
are allocated to its new version 
6.0, due for release this summer. 
Its primary new functionality 
will be a run-time error detec- 
tion mode that doesn't require 
a rebuild. This mode will be 
available in both the Linux and 
Windows versions. 

Clune believes that Linux 
acceptance in the enterprise 
depends primarily on whether 
the environment is migrating 
from a Windows or a Unix plat- 
form. "Enterprise transitions 
from Unix to Linux have been 
very smooth," he said. "We're 




seeing more and more switches 
like this. For Windows-based 
companies there are barriers. 
These are mainly educational, 
or fear of the unknown." 

Fragmentation of the oper- 
ating system is problematic 
from Clune's standpoint. "In 
some ways, supporting Linux has 
been more 
difficult than 
the other Unix 
platforms be- 
cause of the 
fact that prac- 
tically every- 
body running 
Linux has 
their own cus- 
tomized ker- 
nel," he said. 
"Our official 
stance is that 
out of the box, 
we support 
the Red H at distribution, but in 
reality, if something doesn't 
match up right, then we help 
them configure. So far, the 
splintering hasn't been a huge 
issue, but definitely more so 
with Linux than with other 
Unix platforms." 

SilverStream Software Inc. 
(www.silverstream.com) is about 



Want Linux? It 
depends whether 
you're coming 
from Unix or 
Windows, be- 
lieves ParaSoft's 
Jim Clune. 



to release its Java 2 Enterprise 
Edition (J2EE)-based Silver- 
Stream Application Server 3.0. 
The application server currently 
supports Windows NT Server, 
Solaris and HP-UX 11. 

According to Charlie Un- 
gashick, director of product 
marketing at SilverStream, 
"Our goal is to always increase 
our ports and the number of 
platforms our customers can 
run on, but we didn't want to 
hold up the release of this 
server to our Windows NT, 
Solaris and Unix customers 
because of the current Linux 
landscape." 

Ungashick added, "We are 
currently in the midst of our 
porting effort and going 
through the process of working 
with the latest release candi- 
dates of J 2EE -compliant Linux 
JVMs, including Blackdown's 
Release 4.0 and the new 
Inprise/Sun Release 2.0 based 
on B lackdown code, to see which 
one we believe is the best." 

Ungashick said that Silver- 
Stream anticipates having a 
version of its Application Server 
running on Linux "very soon" 
but declined to specify a re- 
lease date because the porting 



effort and final Java Virtual 
Machine hadn't been deliv- 
ered. When pressed for a time 
frame, U ngashick said, "We are 
very aggressive about it, but I 
can't give any specifics because 
of the virtual machines. Obvi- 
ously, we run on top of them 
and any minor shifts can be 
negative or positive. We've 
reported some technical issues 
to Sun as well as a few other 
vendors, and we're anticipating 
fixes. We're hoping that when 
they do release the final VMs 
they're as stable as the other 
release candidates." 

SilverStream's current lead 
platform is Windows, primarily 
because its development envi- 
ronment is certified to run 
exclusively on W indows N T and 
its HP-UX 11 offering is only a 
year old. Windows NT is 
followed closely by Solaris. Its 
customer base is a mix of high- 
volume Web sites serving inter- 
active and dynamic B-to-B 
applications as well as enter- 
prises running strategic intranet 
and extranet applications. 

Ungashick believes that it's 
an interesting ti me for the L inux 
market because of the shipment 
of Windows 2000 and Solaris 8. 



"What you'll start to see is that 
corporate IT organizations are 
beginning to evaluate Linux as a 
player on the desktop against 
Windows 2000 and in the back 
office against Solaris 8. For the 
first time, with the latest ver- 
sions of the Linux JVMs, Linux 
is becoming a head-to-head 
competitor and not just a hype 
or a fad." 

THE FINAL BATTLEFIELD 

Legitimacy does not come 
without challenge. F rom U nga- 
shick's point of view, the biggest 
possible hurdle for Linux, if 
there is one, will be application 
development for the desktop. 
"On the desktop, applications 
have always made or broken an 
operating system's livelihood. 
Later renditions of IBM 's OS/2 
are a good example of why 
a very good operating system 
didn't make it in a widespread 
corporate IT environment," he 
said. I don't know that desktop 
productivity suite applications 
are as critical to success as they 
once were. Applications are 
moving more to a Web-based 
model and application service 
providers are the wave of 
the future."! 
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ONE LINUX 

< continued from page 21 

which has failed," he said. 

"[The layered model] gives 
tremendous economies of 
scale," Vrolyk said. "The lever- 
age comes from millions of peo- 
ple using the same thing. The 
lowering of the price of Solaris 
to zero proves this." 

SUN DEFENDS 

ITS BUSINESS MODEL 

Tom Goguen, Sun's group man- 
ager for Solaris, defended Sun's 
business model. "In terms of 
the price of things, people only 
want to pay what they have to 
pay for anything. That's a tru- 
ism," he said. "To attack that 
model is quite interesting be- 
cause that's the Linux model. 
We've adopted that model for 
Solaris. With Solaris 8, we've 
made binaries free with unlim- 
ited user licenses. We have 
made the source available for 
free. We have many different 
source licenses, but we are 
making it available." 

Goguen said Solaris is free 
for systems that run from one to 
eight CPUs. The reason, he 
said, is to make the cost of get- 
ting involved with Solaris very 
low. "Around an operating sys- 
tem, there is basically a cyclical 
life that exists," Goguen said. 
"Developers develop to the 
platform, it thrives, that gives 
more reasons for people to buy 
it. You have to get this thing 
rolling, and it can become 
somewhat self-sustaining." 
More important, he said, the 
cost to get involved and to inno- 
vate on any one platform can be 
prohibitive if people are charg- 
ing for that source. "You can 
benefit tremendously by en- 
couraging new innovation by 
making source available for 
free," he said. 

Goguen also said that while 
Sun could be considered verti- 
cally integrated, each of the dif- 
ferent layers within Sun's stack 
has created a market for itself. 
"We've sold SPARC chips, 
we've sold Solaris which is IA- 
64 ready, [and] Java runs on all 
kinds of operating systems, in- 
cluding Linux," he said. "At 
each of the horizontal layers, 
we are fairly well represented 
across the board. It's unfair to 
say we're so tightly integrated 
that we can't run across other 
layers." H owever, the benefit to 
buying a stack of software and 
hardware that is integrated, he 
said, comes when you're trying 
to scale up the system and the 



software engineers have some 
integration with the hardware 
engineers. 

Goguen said Sun is doing a 
lot of work with the open- 
source community. "Linux and 
Solaris are close to each other 
in terms of their heritage," he 
said. "I t's pretty easy to transfer 
from one to the other. If sud- 



denly Linux became this won- 
derful operating system that 
scales like Solaris, there would 
be nothing stopping us from 
merging Solaris and Linux and 
branding it Solaris and keeping 
it going. Solaris is better when 
it comes to types of enterprise- 
class features our customers are 
asking for, but there are Linux 



distributions available on 
SPARC systems, and they run 
quite nicely there." 

As for Windows 2000, 
Goguen said, "They [M icrosoft] 
spent an extra two years getting 
it to market and it was designed 
for a world in which Windows 
desktops dominated the market 
and a world of tiny servers. 



Well, the world has changed." 
But according to Vrolyk, a 
key piece of Linux's success is 
that its development is in the 
hands of "a gang of guys, just 
hanging out, arguing, yelling. 
They have bake-off after bake- 
off, with no one in control. The 
guys with the suits can't fence 
that in or they'll destroy it." I 
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Hardware accelerated OpenGL R 

♦ 3D Hardware Support 

♦ High-Performance Accelerated 
Implementation of OpenGL 

♦ OpenGL Conformance Test Certified 

♦ Includes a Free Copy of METRO-X 
+ Available for: 

Linux/x86, Linux/Alpha, & FreeBSD 
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VBusiness has moved automated Software Change Management from 
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MICROSOFT'S DNA? WHOA! 



Call me fussy, but I don't like the idea 
of having my e-commerce founda- 
tion called DNA. DNA is the double 
helix that makes me and not you. I like 
this double helix; sure it has its flaws, 
but anything that completely captures 
what makes me unique is not anything 
I want to think about M icrosoft diddling 
with. So, when the Redmonites 
come knocking to talk to me 
about D N A, I get suspicious. 

First of all they've got it all 
wrong. Distributed iNternet 
Architecture is what the "acro- 
nym" DNA refers to. The choice 
of letters continues the recent trend of 
using the second letter of a word rather 
than the first, if the second has more 
zing. I believe XM L (extensible M arkup 
Language) was the first popular technol- 
ogy to be named this way. Applying the 
technique to previous acronyms, you 
discover all sorts of possibilities that lay 
dormant for far too long. For all those 
years, MS-DOS was hideously mis- 
named. IS-DOS is much more com- 
pelling. Why didn't they think of that 
earlier? Conspiracy nuts will have a field 
day with this discovery. 

But seriously, my suspicion of M icro- 
soft's e-commerce strategy goes beyond 
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the choice of monikers. I am just not 
sure Microsoft is capable of delivering 
mission-critical software to the enter- 
prise. To start with, M icrosoft's I nternet 
strategy has been muddled (rarely a sign 
of reliability). Certainly, it won the 
browser war(s). Regardless of the 
machinations that were highlighted at 
the antitrust trial, M icrosoft's top 
spot in browsers is due in 
large part to technology, even 
if the path to victory was lit- 
tered with acts of high-handed 
behavior. But the browser war 
was Microsoft's to win. Micro- 
soft does desktops. But where does it 
go from there? 

The various Web-server strategies 
strike me as confused. I see no coherent 
vision that is trying to set out to conquer 
the Internet or the Web. Indeed, 
M icrosoft has a series of ho-hum offer- 
ings that compete unfavorably with 
open-source software. These offerings 
run on an operating system that hangs 
regularly and is, therefore, no one's 
choice for mission-critical computing. 

Comes now e-commerce. M icrosoft's 
strategy, termed D N A, is really all about 
XM L . I was at the launch. And all any- 
body heard about was XM L and M icro- 



soft's attempts to standardize industry 
XML implementations using its own 
BizW ire framework. 

To its credit, Microsoft has imple- 
mented XML in Internet Explorer 5.0, 
but all other aspects of DNA are still 
awaiting shipment, already months late. 
BizW ire has lots of partners waiting to do 
something, but no one is delivering any- 
thing. And as a result, M icrosoft's e-com- 
merce strategy looks a lot like something 
that will be relaunched under a different 
name within 12 months. You recall this 
was the strategy with OLE, COM, 
ActiveX, D CO M , CO M +. N othing is dif- 
ferent here. When BizWire finally ships 
and other portions of DNA arrive, 
e-commerce will already have moved to 
different issues. And Microsoft will 
relaunch its e-commerce initiative. 

Contrast this to IBM, where every 
aspect of the company tends toward 
e-commerce. IBM is a company that 
understands mission-critical computing, 
highly reliable operating systems and 
extended commitment to customers. 
To obtain its laurels as an e-commerce 
leader, IBM has had to align the entire 
company to fit the new mission. 
M icrosoft is a long way from doing this. 
Microsoft is testing its e-commerce 
strategy. It's putting its big toe in the 
water to see if it's safe. I BM , by compar- 
ison, is in the deep end. 



So what does this have to do with 
middleware? Everything. It should 
seem pretty clear today that the distrib- 
uted computing model will insinuate 
itself into most aspects of the enter- 
prise. And the driver for this process 
is the Internet— specifically the e-com- 
merce aspect. 

As e-commerce becomes a larger 
slice of total sales for many companies, 
even the laggards will be forced to 
accept this new way of designing com- 
puting infrastructure. And at the center 
of this model is middleware: the essen- 
tial communication between disparate 
pieces of the distributed solution. 

In last issue's column, I discussed 
how enterprise Java and CORBA are 
the keys to modern distributed comput- 
ing. But for sites using more traditional 
computing paradigms, standard piping 
such as messaging-oriented middle- 
ware will be an important player. And 
in this arena, the enterprise-oriented 
company, the one that has provided 
mission-critical apps with reliable solu- 
tions, is the one that will get the nod. 
Think IBM. Microsoft, DNA or not, 
cannot yet prove that it's ready to play 
in this space. I 

Andrew Binstock is principal analyst at 
Pacific Data Works LLC. Reach him at 
abinstock@pacificdataworks.com. 



A SURPRISING OPEN-SOURCE CHAMPION 



I hate the software biz sometimes. 
Especially now with the accursed 
UCITA, vendor-sponsored FUD pages 
and the Linux-IPO craze. You can't log 
on to the I nternet without tripping over 
a bushel of cookie-setting animated 
banner ads. Trade shows are full of 
product pitches and slick demos mas- 
querading as technical sessions. The 
whole dang industry is crawling with 
hucksters and slimy slithering marke- 
teers. It's hard to know who to trust. 

It's a good thing for you I'm here. 
W ho do you trust? Trust me! I 'm the only 
one who's on your side. The writing may 
be mundane and the insights unextraor- 
dinary, but I promise you unvarnished 
truth by the bale. You can count on it. 

THE POINT, IF I HAVE ONE 

I n the previous issue— you can probably 
find it online somewhere but don't ask 
me where; the editors don't talk to me 
except to nag about deadlines— 
I exposed Sun M icrosystems as an open- 
source pretender, taking the company to 
task for abandoning the international 
Java-standardization process, failing to 
acknowledge an open-source work 
group in the creation of its Linux-based 
Java tools, releasing Solaris 8 on aphony 
open basis, and riding in enclosed eleva- 
tors without sufficient breath mints. 
I promised to highlight a praiseworthy 
company in this issue. 



That company, surprisingly enough, 
islBM. 

That's right, the company that per- 
sonified the notion of closed-source 
proprietary software. The company 
whose arrogance led the entire industry 
to think M icrosoft— M icrosoft!— would 
be a preferable standard bearer. 

What you may not know 
is the extent to which I BM 
has exercised beneficence 
and insight in response to the 
open-source movement. Over 
the past year IBM has compiled 
an exemplary track record. 

For example... the company has 
released significant proprietary technol- 
ogy to the open-source community 
under comprehensible, industry- stan- 
dard licenses. Technology like the J our- 
naled F ile System for L inux, J ikes, cross- 
platform classes for Unicode support, 
useful sets of Java Beans and more. 

For example... the company has 
announced that its future server offer- 
ings will be Linux-compatible, and has 
appointed a Linux czar, Irving Wlad- 
awsky-Berger, head of the newly formed 
E nterprise Systems group, to make it so. 
Wladawsky-Berger's job is to make 
Linux an equal partner with S/390, 
AS/400 and AIX. 

For example... IBM 's Developer- 
works and Alphaworks initiatives repre- 
sent a genuine effort to establish a dialog 
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between IBM's technical staff and the 
developer community. N ews and tutori- 
al material, feedback mechanisms, tech- 
nology previews and free downloads all 
lead to the conclusion that IBM has real 
respect for developers and their needs. 
(Visitthesitesatwww.ibm.com/developer 
and www.alphaworks.ibm.com.) 

F or example... IBM is on the right side 
of the standards battles in Java and XM L . 
IBM has dropped tantalizing 
hints that it intends to lead an 
industrywide consolidation of 
Linux with AIX, SCO Unix 
and other Unix variants. One of 
its strategies is to yield up pro- 
prietary technology— including 
big chunks of AIX— to the open-source 
community. The company believes that 
through this strategy, it can aid in Linux's 
evolution into an enterprise operating 
system. In the long term, AIX could be 
nothing more than a feature-packed 
high-end version of the industry-stan- 
dard operating system for database, net- 
work and enterprise servers: IBM Linux. 
It reads deliciously like revenge 
against M icrosoft's betrayal of OS/2. 

IBM states that it remains committed 
to Windows NT, of course, and even 
Windows 2000. But the enthusiasm at 
Big Blue seems reserved for Linux and 
open-source technology. 

WHERE DO YOU REALLY 
WANT TO GO TODAY? 

Did you ever notice that when people 
ask "Where do you want to go today?" 



they already have your destination in 
mind? According to closed-source, pro- 
prietary publishing tradition, the author 
of a column has complete control of the 
topics and the treatment. To break with 
that tradition, in the spirit of the open- 
source ethos, I'm not going to dictate 
what future columns will be about. 
I 'II let you tell me. H ere are some topics 
we could explore together: 

• Why the guys in black hats love the 
U C I TA— and why it's bad law 

• Kick 'em while they're down— more 
Sun-bashing 

• H ey, what ever happened to BSD ? 
•Why don't those open-source guys 

get a haircut? 

• HasSlashdotsold out? 

• Where to find open-source develop- 
ment tools 

•Why the Linux Standards Base is 
essential to your future 

• Rating the open-source repositories 

• Linux in the post-PC era 

•The beginning of the end for 
M icrosoft 

D rop me a line at jdh@sdtimes.com. 
Let me know which of these topics 
strikes your fancy, or propose new top- 
ics. I promise to be bound by your deci- 
sion about which topics to cover. I 

J.D. Hildebrand is the former editor of 
such publications as Computer Lan- 
guage, Unix Review and WindowsTech 
Journal. Reach him atjdh@sdtimes.com. 
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WINDOWS AND OPEN SOURCE? MOSTLY A YAWN 



As I write this in late February, today 
was an open-source kind of day F irst, 
Bloomberg ran a story claiming that Bill 
Gates offered to open the source code to 
Windows if the government would allow 
that action to settle its antitrust case 
against Microsoft Corp. Naturally, this 
started a blizzard of e-mails and discus- 
sion threads, all trying to cope 
with the possible ramifications 
of such a move. And all this 
was only to culminate in an 
anti-climactic denial by Micro- 
soft's PR minions that Gates ever 
said anything of the sort and an 
immediate return to the party line: 
are doing our best to settle this case." 

You can almost see the large hooked 
cane yanking Billy G. off the stage, can't 
you? No disrespect to Microsoft, but 
who are they kidding with this he-never- 
said-any-such-thing line? This is 
Bloomberg we're talking about, not the 
National Enquirer. 

The concept of an open-source Win- 
dows operating system isn't nearly all it's 
cracked up to be on the surface anyway. 

First, Microsoft is being sued only 
over Windows 95/98, which doesn't nec- 
essarily mean any court decision would 
affect Windows NT/2000. 

Second, that's a lot of source code 
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we're talking about. M icrosoft's program- 
mers never heard of Jenny Craig when 
it comes to code bloat, so it would take 
even the most talented open-source afi- 
cionados quite some time to make heads 
or tails of rawRedmondian runes. Not to 
mention that if only the Windows source 
code is opened and not related tech- 
nologies such as COM , the ges- 
ture becomes even weaker. 



WINWATCH 




UP A LEVEL 

But what about open source on 
top of Windows? Shortly before 
Mr. Gates allegedly did the 
open-mouth-insert-foot dance, the folks 
over at the newly merged Redhat/ 
Cygnus pointed me at a not-so-new tool 
called Cygwin. The upshot is that the 
Cygwin product will deliver a stable 
Unix/Linux shell and development envi- 
ronment on top of W i ndows N T, thereby 
allowing developers to quickly port U nix 
or Linux applications to Windows. In 
addition, the cygwin.dll will be used 
solely to develop open-source applica- 
tions—yeah, that caught me, too; but 
more on that later. 

Redhat/Cygnus maintains that Cyg- 
win is solving one of the biggest 
migraines that developers can face: man- 
aging applications across heterogeneous 



operating-system platforms. By developing 
cygwin.dll, the company claims Redhat/ 
Cygnus allows Unix-oriented developers 
to better adapt to a Windows-centric 
environment. 

Frankly, I don't get an adrenaline 
surge here, either. While there are a sig- 
nificant number of developers out there 
who would rather work under a Unix- 
like environment than any form of 
Windows, how big is this market really? 
H ow big an influence will it have? Those 
developers will still be developing Win- 
dows applications, so to me at least it 
makes more sense to do it under the 
native operating system, which is what 
Cygwin does in a way, but then again, 
not, if you see what I mean. 

And the concept of porting open- 
source applications to Windows NT is 
equally niche. Sure, there may be open- 
source and Unix applications that out- 
perform their native Win32 equivalents, 
but the number of apps that would really 
benefit from being ported must be mi- 
nuscule. Especially when you consider 
how much easier it is simply to run a 
dedicated U nix or L inux box next to an 
W i ndows N T/2000 server farm, now that 
we can make use of a smart network di- 
rectory structure. 

An interesting aspect of the Cygwin 
deal was its licensing structure. A single- 
user copy of Cygwin 1.0 costs $99, while 
the same license for Cygnus' native 



Win32-compatible GNU Pro ran around 
$79. In larger development environ- 
ments, subscriptions for these packages 
would quickly run into the thousands of 
dollars when you include things like 
developer support and a commercial- 
use license to the Cygwin libraries. This 
brings up a multithorned issue: Red 
H at/Cygnus built a large chunk of Cyg- 
win with open-source software and mar- 
kets it for use in developing open-source 
software, yet charges commercial prices 
for its use. H ow cool is that? 

Admittedly, I 'm deliberately ignoring 
the philosophical picture here: The abil- 
ity to easily port Linux applications to 
Windows N T and vice versa means more 
free software functionality which should, 
in theory, be good for everyone. But as 
my editors have often pointed out— 
typically with blunt objects and head 
trauma— my function here isn't to phi- 
losophize, but to keep track of things 
that might help businesses that are de- 
veloping for the Windows environment. 
While Cygwin may make some Unix- 
centric programmers more at home 
under Windows NT, I don't see profes- 
sional shops raising their collective eye- 
brows. We've got other headaches. I 

Oliver Rist istechnical director of Grand 
Central Network, an Internet consulting 
company. He can be reached at orist@ 
grand-central.net. 
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Don't let a few forgotten bugs stand 
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Includes advanced features like a stand-alone bug reporter>automated e-mail bug import, e-mail notifica- 
tions, duplicate bug handling, release notes generation, and more. 
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TestTrack Web - Complete Web-based Bug Tracking 

• Full bug tracking functionality, security, and ease-of-use, 



all accessible from a standard web browser. Supports 

simultanous access with regular TestTrack users. 

Customer support pages allow your customers 

to quickly report bugs and feature requests to 

you and optionally check the status of issues y* 

they already reported. ^"^^^T* 
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Wish you had the power 

of Excel on the web? 




Let's face it, you can wish all you want but Excel is still a heavy Windows-based, 
desktop-bound application— not your ideal choice for building online solutions. 

Formula One, however, is an Excel-compatible spreadsheet toolset designed 

for distributed computing. Its robust calculating, formatting, and charting 

abilities, combined with point-and-click access available anywhere via 

a browser, make Formula One the most powerful spreadsheet 

technology available for integration into your Web deployed 

applications. 

So whether you need database reporting, analysis, calculations, data 
presentation, or data entry, Formula One has the following advantages: 



Formula One has a lightweight footprint. System requirements 
for Excel 2000 include 1 46 MB of hard disk space. A Formula One JAR 
file is approximately 1 MB. 

Formula One writes files optimized for the Web. Formula 
One's file compression technology is built with distributed computing in 
mind, enabling it to save files up to 90% smaller than Excel's in some 
cases. Excel's overhead caused by its dependence on Office and 
Windows produces files not suited for Web-based computing. 

Formula One is 100% Pure Java and only requires the 
proper virtual machine to function. Excel requires Windows to 
operate. 



Formula One is built in the Java programming language and 
is ideal for widespread distribution on the Web. Excel and 
Office Web Components are designed for use behind a firewall and 
require Microsoft Office to be installed on all desktops. 

Formula One's architecture and JDBC methods enable it to 
be used with a wide variety of database and application 
servers. Excel can't. 

Formula One provides a JavaBean and applet with an API of 
more than 400 properties, methods, and events. Excel is not 
an API-driven application and can not be used as a component in a Java 
application. 
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WHAT GOES AROUND, COMES AROUND 



Remember the small start-up that 
only last year was banging on ven- 
ture-capital doors trying to get the cash 
it needed to buy a few Super Bowl ads? 
Today that same start-up, flush with 
funds from its I PO, is now on the other 
end of the stick, providing working capi- 
tal for the next crop of small start-ups. 

Corporations are forming 
venture-capital programs at a 
greater rate than ever before. 
According to The Corporate 
Venturing Report, an industry 
newsletter, a total of $6.3 billion 
was allotted for venture pro- 
grams in 1999, up from $1.7 billion the 
year before. And there does not appear 
to be any slowdown in the flow of dollars 
being tossed into the high-tech wind. 

"VC firms are still driving the invest- 
ments in small start-ups," said David 
Barry, senior editor of The Corporate 
Venturing Report. "But now you have 
companies that as recently as last year 
were raising money turning around and 
making investments." As an example, 
Barry cited a company called Critical 
Path, which received a $33 million 
round of funding in January 1999 and 
invested in two companies in October. 

Barry said that in past years, you'd see 
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a corporation involved in thistype of cap- 
ital deal perhaps once per month. Now, 
he said, "It's become every other deal." 

And, for the most part, the invest- 
ments have been amazing success sto- 
ries. The report cites Apple Computer 
Corp., which turned a $15 million 
investment in I nternet company Akamai 
Technologies Inc. into a stake 
worth $1 billion. Intel Corp. 
was the most active venture 
firm last year, making 38 
investments, with M icrosoft (20) 
and Cisco (13) also doling out 
huge amounts. 
This certainly benefits the start-up, 
which receives venture funding to get 
goi ng and then seeks out a corporate part- 
ner to help it develop the product and get 
it to market. And it benefits the capitalist 
by getting a stake in the young company. 
Part of what's driving corporations 
into this type of investment is their own 
stock prices. When a company gets 
large, it becomes more difficult to main- 
tain the rates of growth established in 
the formative years. Therefore, they 
need to invest in smaller companies to 
stay competitive and to move into areas 
of different technologies. Intel, for ex- 
ample, is not investing only in chip man- 



ufacturers, but also in companies that 
build software to run on its processors. 

The successful initial public offering 
of N eoforma.com I nc. is paying big divi- 
dends for Dell Computer Corp., which 
invested $25 million last fall for 4.4 
million shares. Neoforma, an online 
exchange for medical products, went 
public on Jan. 24 at $13 and quickly 
went as high as $60. At the end of J anu- 
ary, Neoforma shares were trading at 
around $45, giving Dell a stake worth 
nearly $200 million. 

H owever, the market analysts will be 
wary of the effect of these transactions. 
The investing companies could sell off 
huge blocks of shares for equally huge 
infusions of cash. Stock analysts might 
look at these sales as a one-time event, 
instead of the investment as a growth 
opportunity, and the capital company 
won't get a boost to its own share price. 

But there's all that cash. What a nice 
problem to have. 

STREET SWEEPING 

Application service provider Interliant 
Inc. announced its intention to raise 
$125 million (excluding any over-allot- 
ments) through a Rule 144A offering of 
convertible subordinated notes. The 
notes will be convertible into shares of 
Interliant's common stock at a conver- 
sion price to be determined. It also 



announced it has raised $17.5 million in 
strategic funding via investments from 
Dell Computer Corp. and BMC Soft- 
ware I nc. ... The XM L F und has made 
what it calls a sizable investment in a 
3-month-old start-up called ThinkView, 
which develops media syndication solu- 
tions. ... Codexa, an ASP for Wall Street 
professionals, has completed an $8 mil- 
lion initial financing round. 

Allegrix Inc., a privately held com- 
pany providing ASP-enabling services to 
ISVs and VARs, said it has raised $5.6 
million in the company's first round of 
financing. ... M &A West I nc. announced 
it has established the subsidiary Linux 
Ventures Inc. as a holding company for 
investment and development opportuni- 
ties. Current investments include Open- 
Express.com Inc., Links2Linux.com and 
LinuxFunding.com. 

The board of directors of Sybase I nc. 
has approved the repurchase of up to an 
additional $50 million of the company's 
outstanding common stock, extending 
an original $100 million buy-back plan. 
... Sequoia Software Corp. has filed with 
the Securities and Exchange Commis- 
sion to sell up to a maximum of $60 
million of its common stock. There was 
no offering price range announced. I 

David Rubinstein is executive editor of 
SD Times. 



PLANNING FOR WINDOWS 2000 



Okay, so Windows 2000 is here. N ow 
what should you do about it, partic- 
ularly in terms of building and deploying 
end-user applications on Windows 2000 
Professional? There are definitely bene- 
fits to migrating Windows 9x or even 
Windows NT desktops to Windows 2000 
to take advantage of new networking 
and I nternet capabilities. You'll be work- 
ing with your network and end-user sup- 
port managers in this area, but even so, 
my recommendation is to go slowly. 

F or enterprise applications, there are 
compelling features of Windows 2000 
that bear further examination, such as 
the ability to support encrypted sessions 
across the I nternet, new tools to set up 
clustered computers, and a new way to 
administer all Windows 2000 services 
using the M anagement Console. 

Chances are, you already have a few 
test machines running one or more of its 
three versions (Professional, Server and 
Advanced Server). If not, you should go 
out and get a copy of Windows 2000 
Server now, as it contains almost every- 
thing you'd want to examine, such as 
Active D irectory, 1 1 S version 5 and secu- 
rity enhancements. 

But before you get caught up in the 
hype around the features and start your 
developers working on Windows 2000- 
specific desktop applications, let's look at a 
few critical areasfor migrating your users 
and upgrading your existing network. 



First— and this may sound basic- 
do a RAM and CPU census on your 
desktop population. You'll have prob- 
lems deploying Windows 2000 Profes- 
sional on existing hardware if you have 
purchased a majority of your machines 
prior to 1998, or if your users have less 
than 128MB installed or PCs 
with slower than 166M Hz 
Pentium processors. Plan on 
installing more memory, or 
else buy new equipment. 

Second, if your applications 
are dependent on M icrosoft's 
Exchange Server, wait before upgrading 
those systems to Windows 2000. 
M icrosoft is still working out the bugs on 
integrating Exchange into Active Direc- 
tory, and if you are satisfied with the sta- 
bility of your existing Exchange system, 
then don't introduce Windows 2000 into 
the mix quite yet. 

With other BackOffice components, 
such as SQL Server and Transaction 
Server, install a test machine with 
Windows 2000 Advanced Server as 
soon as you can. These components 
should benefit from performance 
improvements in the new operating 
system. 

Third, don't migrate your primary 
domain controllers just yet. Install Win- 
dows 2000 and operate it in "mixed 
mode"— where it will support both old- 
style NT domain controllers and the 
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newer Active Directory hierarchy. This 
will give your team a chance to test 
application compatibility and determine 
if Active D irectory provides any benefits 
for your setup. As long as your network 
continues to have any NT domain 
controllers, you'll need to continue 
operating in this mixed mode. 

Fourth, make sure that Windows 
2000 can find all of your existing 
network peripherals attached to 
older Windows NT and 
Windows 95/98 machines, 
such as printers, fax servers, 
david ta P e servers and the like. There 

strom have been early reports of prob- 
lems in this area, and you may 
have to move these shared devices to 
Windows 2000 servers. That may be an 
issue, depending on where these de- 
vices are attached and how many of 
them you have. 

A FEW OF MY FAVORITE THINGS 

With these caveats in mind, which new 
features make the most sense to exam- 
ine first? My three favorites are 
WebDAV, mobility support and virtual 
private networking (VPN ) support. 

WebDAV (for Distributed Author- 
ing and Development) makes it easier 
for intranet publishing and for your 
development team— or even corporate 
end users— to collaborate on docu- 
ments across the I nternet. This feature 
is built into 1 1 S version 5 and supported 
by Internet Explorer 5.0 and M icrosoft 
Office 2000. 



Windows 2000 includes many new 
features that make it easier for mobile 
users to go about their computing lives. 
Two notable ones are the ability to hot 
dock and undock from a network without 
having to reboot or reconfigure your 
networking components, and the ability 
to synchronize your files with a server 
and still have these files available when 
you are disconnected. 

F inally, Windows 2000 offers built-in 
support for VPNs and for maintaining 
secure connections over the public 
Internet. These and other security 
improvements will take some effort to 
configure properly, and the documenta- 
tion could be better, but it is an impor- 
tant start for M icrosoft, and eventually 
other vendors will offer enhancements 
to the basic protocols that come with the 
operating system. 

These features are big improvements 
over what existed in earlier versions of 
Windows. But remember that Windows 
2000 is the first version of a new operat- 
ing system, and there will be deploy- 
ment problems and support issues. Stay 
in lock step with your network and end- 
user support managers. Any rollout 
of business-critical applications that 
require the new operating system 
shouldn't be faster than they're comfort- 
able with. I 

David Strom is president of David 
Strom I nc. and editor of the Web I nfor- 
mant newsletter. Reach him at david@ 
strom.com. 
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<< continued from page 5 in the second quarter. D eveloper licens- 
es Start at $2,000 for PowerTier Advanced Server and $7,500 for 
PowerTier Enterprise Server. . . M icrosoft Corp. has released to 

manufacturing interix 2.2, an environment for running Unix 
applications and scripts on Windows NT/2000 without rewriting 
code . . . The I nfoWorld Test Center has named Red H at I nc.'s 
Red Hat Linux 6.1 its operating system Product of the Year in 
1999 . . . Tibco Software I nc. will release its Pragmatic General 
Multicast (PGM) application as open source. . . Sun M icrosystems 

1 nc. has submitted Java 2 Enterprise Edition (J2EE) and the Java 

2 standard Edition (J2SE) to the Java Community Process pro- 
gram. Sun submitted two Java Specification Requests (JSRs) to 
theJCP: oneforJ2SE 1.4, the successor to J 2SE 1.3, which is 
currently available as a beta release; and another for J2E E 1.3, 
the next release of J 2EE, which has been shipping in version 1.2 
since December 1999. TheJSR is the first step in developing or 
revising a Java technology specification. Sun also has entered into 
an agreement with Caldera Systems Inc., in which Caldera will 
shi p Sun's J 2SE and J ava H otSpot Virtual M achine later this year 
. . . PointBase I nc. has shipped PointBase 3, which adds new fea- 
tures to the company's object-relational Java database. Version 3 
offers SQL -standard database triggers, enhanced developer tools, 
improved performance and multibyte character support for in- 
ternational languages, through compliance with the Unicode 
standard . . . Serena Software I nc. has updated its database man- 
agement tool kit, starTool 6.1.0, which now supports DB 2... Ra- 
tional Software Corp. has announced the availability of Quick- 
start, new services to help customers adopt Rational's products. 
QuickStart programs are available for Rational's Rose, 
C learC ase and C learQ uest products . . . C oncurrent C omputer 
Corp. will offer a Linux version of its Nigntstar development 
tools and its C/C++, FORTRAN and Ada compilers. Develop- 
ers will now have the option to either run their real-time multi- 
processing applications using Concurrent's real-time operating 
system, PowerMAX OS, or run their open-systems real-time 
applications using the Linux operating system. In addition, 
Concurrent's next-generation Power Hawk integrated real- 
time computer system will be available with either PowerM AX 
OS or Linux operating systems. The new Power H awk system 
will allow the developer to select any number of CPUs (up to 
32), either the PowerM AX operating system or Linux or both 
in a single VM E chassis. 



, PEOPLE 1 



James Richardson will be senior vice president of Cisco Sys- 
tems I nc.'s enterprise line of business as of June 1. He will also 
assume responsibility for the Application Technology Group, 
comprising the former operations of recent acquisitions Amteva, 
Geotel and Webline . . . Tim Breidigan, 36, who rose through 
the ranks of M icrosoft Corp. to become publisher of M icrosoft 
Network and director of field marketing, has joined the board 
of directors of Uniloc Co. . . . ProcureNet Inc. has named 
Reuven Battat, a former top Computer Associates I nternational 
Inc. executive, as president and CEO. At the same time, Battat 
acquired a significant minority stake in ProcureNet. Most 
recently, Battat, 43, was president of interBiz Solutions, CA's 
eBusiness division . . . ASP Industry Consortium chairman 
Traver Gruen-Kennedy hasjoined CyLexSystems I nc.'s board of 
directors.. . Inprise President and CEO Dale Fuller hasjoined 
the board of advisers atAboveTrade.com, an online investment 
firm . . . Hugo Sanchez has joined Integrated Chipware as 
director of product marketing for RTM Workshop, the company's 
requirements management product line. Sanchez spent the 
past four years at Rational Software Corp., where he held a 
number of director positions in the areas of licensing, product 
management and marketing . . . Kyle Brown is the new vice 
president of ASP services at eAssist.com, which offers Inter- 
net-based customer support and demand creation services. I 
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ers to create HTML-based 
forms that will be rendered on 
the server, permitting them to 
be displayed on any browser 
and any platform. 

According to the company, 
developers will be able to drag 
and drop built-in Web-centric 
controls onto a form and dou- 
ble-click those controls to edit 
their properties or add special 
instructions. Some of that func- 
tionality, in the form of optional 
components, is already present 
in Visual Basic 6.0 Enterprise 
Edition. 

The new features will be ful- 
ly implemented with Visual Ba- 
sic 7.0 and Visual Studio 7.0, 
which M icrosoft said are sched- 
uled for release toward the end 
of this year. The company will 
take an interim step by releas- 
ing Web Services Tool Kits for 
Visual Basic 6.0 and Visual Stu- 
dio 6.0 this month. 

Windows 2000 also presents 
some features important to M i- 
crosoft's vision of the Internet 
user experience, including core 
services for the Web, an inte- 
grated XM L parser and an ap- 
plication server built around 
Windows Distributed Internet 
Application (DNA) architec- 
ture, which itself is at the very 
core of the company's Web 
strategy. 

IT'S IN THE GENES 

Ballmer described Windows 
DNA as a set of technologies 
permitting developers to build 
a three-tied application, which 
includes the client, the applica- 
tion logic and the data, and 
communicates using a variety of 
protocols, including TCP/IP, 
HTTP, plus Simple Object Ac- 
cess Protocol (SOAP) for com- 
municating between layers. 

Other core capabilities built 
into Windows 2000 include 
COM +, new ASP services, Ac- 
tive Directory, transaction and 
queuing services, plus connec- 
tion and database-access archi- 
tecture. 

These capabilities will be 
available either at the presenta- 
tion or client layers, he said, to 
provide users with either a thin- 
client browser experience or a 
rich client with code running 
locally, on the server or Web 
site or both. 

"Because the backbone of 
the way in which programs will 
work with other programs on 
the Web is this kind of XML 
message passing," Ballmer said, 



"XML will usher in [the] next 
generation of the programma- 
ble Web." 

JUST ADDING A BUZZWORD? 

But shoe-horning a popular 
product to make it fit a new de- 
velopment paradigm may not 
be the ideal strategy. That was 
the feeling of Nancy Lee, XM L 
product marketing manager 
at Sun Microsystems Inc. 
"They're taking some legacy 
tool and trying to force it into 
the Web environment, and that 
doesn't really make sense," she 
said. "Ideally, you want to start 
from a technology that is built 
for the Web," she continued, 
referring to Sun'sJ ava program- 
ming language, the origin of 
which she compared to that of 
XML, as both grew from a 
Web-related need. 

During his speech, Ballmer 
reiterated M icrosoft'sfirm com- 
mitment to providing Visual Ba- 
sic developers with in-depth 
support for XML, the special- 
ized markup language for Web 
data exchange and interoper- 
ability. But providing tools for 
making data cross-platform only 
solves part of the problem, ac- 
cording to Sun's Lee. 



"If you're building to the 
Web environment, you want to 
have your applications running 
on any platform," she said, "be- 
cause depending on the appli- 
cation, [many times] it is just as 
important to provide business 
logic that is cross-platform, 
too." 

Sun, long a supporter of 
XML, is scheduled to release 
later this month itsjava API for 
XML Parsing, which will per- 
mit J ava developers to plug any 
XML-compliant parser into 
their applications. 

"It provides the glue to 
make your Java applications 
XML-capable," said Lee, who 
spoke about the future and 
about Sun's commitment to the 
XML standard with upcoming 
products like Adelard, the code 
name for its XM L data binding 
project scheduled for release 
later this year. 

"What you will see is a num- 
ber of vendors who will be sup- 
porting XM L, because it makes 
a lot of sense," Lee said. 
"[What's important to develop- 
ers is] whether they are sup- 
porting it to add value to their 
application, or just to capitalize 
on the buzz around XM L ." I 



AS/400 PASE 

< continued from page 1 

OS/400 operating services ex- 
posed to users and applica- 
tions, including the user inter- 
face and APIs for Integrated 
Language Environment (ILE), 
the native OS/400 application 
services. 

With PASE under OS/400 
4.4, the operating system now 
includes a second set of appli- 
cation services: AIX libraries 
and APIs. The AIX APIs actual- 
ly map to I L E 's API s. Accord- 
ing to IBM , this allows resource 
sharing between AIX and 
OS/400 applications, such as 
printers, network connections 
or even databases. 

AIX applications running 
under PASE will therefore look 
like ILE applications to AS/400 
operators. AIX applications will 
need to be recompiled to run 
under AS/400 PASE. 

NEW AS/400 APPLICATION 
SERVICE PROVIDER HOSTS 

IBM also announced seven 
new AS/400 application-hosting 
companies, which will either 
serve as application service 
providers themselves or offer 
hosting services to indepen- 
dent software vendors entering 



the ASP business. 

The new hosting providers 
are Affiliated Computer Ser- 
vices Inc. (www.acs-inc.com), 
Data Processing Services Inc. 
(www.dpslink.com), DCS Group 
pic's Digica division (www.digica. 
com), Eviciti Corp. (www.eviciti. 
com), J J Croney & Associates 
Inc. (www.j2ca.com), Prominic 
.Net Inc. (www.prominic.net) 
and SunGard Data Systems 
Inc. (www.sungard.com). 

According to IBM spokes- 
man Tim Schuetz, these com- 
panies will provide a variety of 
services, including networking, 
end-user support and disaster 
recovery and back-up, based on 
the AS/400 platform. 

"These hosting firms are 
providing critically needed re- 
sources to IBM AS/400 ISVs, 
who have good applications but 
not the infrastructure to deliver 
their products to the end user 
through the ASP model," said 
Schuetz. 

"By working with these 
hosting facilities, ISVs gain ac- 
cess to a stable, managed envi- 
ronment, which enables them 
to provide their own applica- 
tions and services to customers 
without the need to expend 
large capital sums on infra- 
structure," he said. I 



i'- 






WE RD3RFT 70 INFORM, TOU THIS 15 TO W YOUR PROBLEM 





l ' 1 


Jfc i jfc 


.-« 








BiLCfl 


niuJ 





You solve problems. If mistakes slip through the cracks or get stuck 
in your workflow, that's a problem. Not to worry. tTrack™4.0 workflow 
solutions on the Web is here. Take bug tracking for instance. tTrack 
4.0 lets you keep track of where a project has been, what has been 
done to it and what needs to occur to complete it successfully. So 
missing bugs doesn't turn into an explosive situation. Visit our Web 
site for all the in-depth technical details we wouldn't dare put here. 
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